1.\" Copyright (c) 1988, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" %sccs.include.redist.man% 5.\" 6.\" @(#)make_keypair.8 8.2 (Berkeley) 12/11/93 7.\" 8.Dd 9.Dt MAKE_KEYPAIR 8 10.Os 11.Sh NAME 12.Nm make_keypair 13.Nd generate Kerberos host key pair 14.Sh SYNOPSIS 15.Nm make_keypair 16.Ar hostname 17.Op Ar hostname ... 18.Sh DESCRIPTION 19The 20.Nm make_keypair 21command 22is used to create pairs of 23.Tn DES 24keys for 25each 26.Ar hostname . 27The keys are used by privileged programs such as 28.Xr register 1 29to make remote updates to the Kerberos database without 30having to have first acquired a Kerberos ticket granting ticket 31.Pq Tn TGT . 32The keys created by 33.Nm make_keypair 34are placed (by hand) in the filesystems of the 35kerberos server in 36.Pa /etc/kerberosIV/register_keys , 37and in the root directory of the clients. 38For example, the file 39.Pa /.update.key128.32.130.3 40would 41contain a copy of the key of the client with 42IP address 128.32.130.3. 43These keys provide a shared secret which may be used to establish 44a secure channel between the client hosts and the Kerberos server. 45.Sh FILES 46.Bl -tag -width /etc/kerberosIV/register_keysxx -compact 47.It Pa /.update.keyxx.xx.xx.xx 48shared 49.Tn DES 50key with server 51.It Pa /etc/kerberosIV/register_keys 52server's key storage directory 53.El 54.Sh SEE ALSO 55.Xr register 1 , 56.Xr registerd 8 , 57.Xr kerberos 1 58.Sh HISTORY 59The 60.Nm make_keypair 61utility first appeared in 4.4BSD. 62