hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-29 20:54:13 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
b97af31bdb
HardenedBSD/usr.sbin/keyserv/keyserv.8

79 lines
1.7 KiB
Groff
Raw Normal View History

Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
.\" @(#)keyserv.1m 1.21 93/07/14 SMI; from SVr4
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.\"macro stdmacro
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
.\" Copyright 1989 AT&T
.\" @(#)keyserv.8c 1.8 89/03/29 SMI;
Add $Id$, to make it simpler for members of the translation teams to track. The Id line is normally at the bottom of the main comment block in the man page, separated from the rest of the manpage by an empty comment, like so; .\" $Id$ .\" If the immediately preceding comment is a @(#) format ID marker than the the $Id$ will line up underneath it with no intervening blank lines. Otherwise, an additional blank line is inserted. Approved by: bde
1999-07-12 22:12:29 +02:00
.\" $Id$
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
.\".TH KEYSERV 8C "9 September 1987"
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Dd September 14, 1992
.Dt KEYSERV 8
.Os
.Sh NAME
.Nm keyserv
.Nd server for storing private encryption keys
.Sh SYNOPSIS
.Nm keyserv
.Op Fl d
.Op Fl D
.Op Fl n
.Op Fl p Ar path
.Op Fl v
.Sh DESCRIPTION
.Nm Keyserv
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
is a daemon that is used for storing the
private encryption keys of each
user logged into the system.
These encryption keys are used for accessing
secure network services such as secure NFS.
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pp
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
Normally, root's key is read from the file
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pa /etc/.rootkey
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
when the daemon is started.
This is useful during power-fail reboots
when no one is around to type a password.
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pp
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
If a client with no secret key calls
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Nm keyserv ,
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
then the key of user
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Em nobody
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
is used instead as the default key.
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pp
The following options are available:
.Bl -tag -width indent
.It Fl d
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
Disable the use of default keys for
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Em nobody .
.It Fl D
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
Run in debugging mode and log all requests to
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Nm keyserv .
.It Fl n
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
Root's secret key is not read from
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pa /etc/.rootkey .
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
Instead,
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Nm
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
prompts the user for the password to decrypt
root's key stored in the
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pa /etc/publickey
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
database and then stores the decrypted key in
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pa /etc/.rootkey
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
for future use.
This option is useful if the
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.Pa /etc/.rootkey
Import of the keyserv daemon needed for Secure RPC. This version supports both the keyserv v1 and v2 protocols. It uses the new AF_LOCAL transport so that only local processes can use it for storing/retrieving keys, and it uses the SCM_CREDS kernel hack for authentication. With these two modifications, we don't need the keyenvoy program normally used with RPC 4.0. Note that if libdes.so.3.x is present on the system when keyserv is started, Secure RPC will run with normal DES encryption. If not, everything falls back to RC4 with a 40 bit key.
1997-05-28 17:44:22 +02:00
file ever gets out of date or corrupted.
Use err(3). Put includes in alphabetical order. Rewrote man page in mdoc format. Document -v and -p flags.
1997-09-23 08:36:27 +02:00
.It Fl p Ar path
Specify where to search for
.Pa libdes.so.3 .
Default is
.Pa /usr/lib .
.It Fl v
Display status of DES support (enabled/disabled).
.El
.Sh FILES
.Bl -tag -width /usr/lib/libdes.so.3. -compact
.It Pa /etc/.rootkey
.It Pa /usr/lib/libdes.so.3.
.El
.Sh "SEE ALSO"
.Xr keylogin 1 ,
.Xr keylogout 1 ,
.Xr publickey 5
Reference in New Issue Copy Permalink