MAKE_KEYPAIR(8) BSD System Manager's Manual MAKE_KEYPAIR(8)NAMEmake_keypair - generate Kerberos host key pair
SYNOPSISmake_keypair hostname [hostname ...]
DESCRIPTION
The make_keypair command is used to create pairs of DES keys for each
hostname. The keys are used by privileged programs such as register(1) to
make remote updates to the Kerberos database without having to have first
acquired a Kerberos ticket granting ticket (TGT). The keys created by
make_keypair are placed (by hand) in the filesystems of the kerberos
server in /etc/kerberosIV/register_keys, and in /etc/kerberosIV on the
clients. For example, the file /etc/kerberosIV/.update.key128.32.130.3
would contain a copy of the key of the client with IP address
128.32.130.3. These keys provide a shared secret which may be used to
establish a secure channel between the client hosts and the Kerberos
server.
FILES
/etc/kerberosIV/.update.keyxx.xx.xx.xx shared DES key with server
/etc/kerberosIV/register_keys server's key storage directory
SEE ALSOregister(1), registerd(8), kerberos(1)HISTORY
The make_keypair utility first appeared in 4.4BSD.
BSDI BSD/OS December 11, 1993 1