1.\" Copyright (c) 1988, 1993
2.\"	The Regents of the University of California.  All rights reserved.
3.\"
4.\" %sccs.include.redist.man%
5.\"
6.\"	@(#)make_keypair.8	8.2 (Berkeley) 12/11/93
7.\"
8.Dd
9.Dt MAKE_KEYPAIR 8
10.Os
11.Sh NAME
12.Nm make_keypair
13.Nd generate Kerberos host key pair
14.Sh SYNOPSIS
15.Nm make_keypair
16.Ar hostname
17.Op Ar hostname ...
18.Sh DESCRIPTION
19The
20.Nm make_keypair
21command
22is used to create pairs of
23.Tn DES
24keys for
25each
26.Ar hostname .
27The keys are used by privileged programs such as
28.Xr register 1
29to make remote updates to the Kerberos database without
30having to have first acquired a Kerberos ticket granting ticket
31.Pq Tn TGT .
32The keys created by
33.Nm make_keypair
34are placed (by hand) in the filesystems of the
35kerberos server in
36.Pa /etc/kerberosIV/register_keys ,
37and in the root directory of the clients.
38For example, the file
39.Pa /.update.key128.32.130.3
40would
41contain a copy of the key of the client with
42IP address 128.32.130.3.
43These keys provide a shared secret which may be used to establish
44a secure channel between the client hosts and the Kerberos server.
45.Sh FILES
46.Bl -tag -width /etc/kerberosIV/register_keysxx -compact
47.It Pa /.update.keyxx.xx.xx.xx
48shared
49.Tn DES
50key with server
51.It Pa /etc/kerberosIV/register_keys
52server's key storage directory
53.El
54.Sh SEE ALSO
55.Xr register 1 ,
56.Xr registerd 8 ,
57.Xr kerberos 1
58.Sh HISTORY
59The
60.Nm make_keypair
61utility first appeared in 4.4BSD.
62