MAKE_KEYPAIR(8)

NAME
make_keypair - generate Kerberos host key pair

SYNOPSIS
make_keypair hostname [hostname ...]

DESCRIPTION
The make_keypair command is used to create pairs of DES keys for each hostname. The keys are used by privileged programs such as register(1) to make remote updates to the Kerberos database without having to have first acquired a Kerberos ticket granting ticket (TGT). The keys created by make_keypair are placed (by hand) in the filesystems of the kerberos server in /etc/kerberosIV/register_keys, and in the root directory of the clients. For example, the file /.update.key128.32.130.3 would contain a copy of the key of the client with IP address 128.32.130.3. These keys provide a shared secret which may be used to establish a secure channel between the client hosts and the Kerberos server.

FILES
/.update.keyxx.xx.xx.xx
    shared DES key with server
/etc/kerberosIV/register_keys
    server's key storage directory

SEE ALSO
kerberos(1), register(1), registerd(8)

HISTORY
The make_keypair utility first appeared in 4.4BSD.