xref: /freebsd/crypto/heimdal/kdc/hprop.8 (revision daf1cffce2e07931f27c6c6998652e90df6ba87e)
1.\" $Id: hprop.8,v 1.3 1997/09/03 20:33:04 joda Exp $
2.\"
3.Dd September 3, 1997
4.Dt HPROP 8
5.Os HEIMDAL
6.Sh NAME
7.Nm hprop
8.Nd
9propagate the KDC database
10.Sh SYNOPSIS
11.Nm
12.Op Fl 4DEhnv
13.Op Fl d Ar file
14.Op Fl -database= Ns Ar file
15.Op Fl -decrypt
16.Op Fl -encrypt
17.Op Fl -help
18.Op Fl k
19.Op Fl -keytab= Ns Ar file
20.Op Fl m Ar file
21.Op Fl -master-key= Ns Ar file
22.Op Fl -stdout
23.Op Fl -v4-db
24.Op Fl -verbose
25.Op Fl -version
26.Ar host ...
27.Sh DESCRIPTION
28.Nm
29propagates the database from a master KDC to a slave. It connects to
30all
31.Ar hosts
32specified on the command by opening a TCP connection to port 754
33(service hprop) and sends the database in encrypted form.
34.Pp
35Options supported:
36.Bl -tag -width Ds
37.It Fl d Ar file
38.It Fl -database= Ns Ar file
39The database to be propagated.
40.It Fl D
41.It Fl -decrypt
42The encryption keys in the database can either be in clear, or
43encrypted with a master key. This option thansmits the database with
44unencrypted keys.
45.It Fl E
46.It Fl -encrypt
47This option thansmits the database with encrypted keys.
48.It Fl k
49.It Fl -keytab= Ns Ar file
50The keytab to use for fetching the key to be used for authenticating
51to the propagation daemon(s). The key
52.Pa kadmin/hprop
53is used from this keytab.
54.It Fl m Ar file
55.It Fl -master-key= Ns Ar file
56Where to find the master key to encrypt or decrypt keys with.
57.It Fl n
58.It Fl -stdout
59Dump the database on stdout, in a format that can be fed to hpropd.
60.It Fl 4
61.It Fl -v4-db
62Use a version 4 database. This option is only available if the code is
63compiled with Kerberos 4 support.
64.El
65.Sh SEE ALSO
66.Xr hpropd 8
67