xref: /freebsd/crypto/heimdal/kdc/kstash.8 (revision 6a068746777241722b2b32c5d0bc443a2a64d80b)
1*ae771770SStanislav Sedov.\" Copyright (c) 1997 - 2004 Kungliga Tekniska Högskolan
2c19800e8SDoug Rabson.\" (Royal Institute of Technology, Stockholm, Sweden).
3c19800e8SDoug Rabson.\" All rights reserved.
4b528cefcSMark Murray.\"
5c19800e8SDoug Rabson.\" Redistribution and use in source and binary forms, with or without
6c19800e8SDoug Rabson.\" modification, are permitted provided that the following conditions
7c19800e8SDoug Rabson.\" are met:
8c19800e8SDoug Rabson.\"
9c19800e8SDoug Rabson.\" 1. Redistributions of source code must retain the above copyright
10c19800e8SDoug Rabson.\"    notice, this list of conditions and the following disclaimer.
11c19800e8SDoug Rabson.\"
12c19800e8SDoug Rabson.\" 2. Redistributions in binary form must reproduce the above copyright
13c19800e8SDoug Rabson.\"    notice, this list of conditions and the following disclaimer in the
14c19800e8SDoug Rabson.\"    documentation and/or other materials provided with the distribution.
15c19800e8SDoug Rabson.\"
16c19800e8SDoug Rabson.\" 3. Neither the name of the Institute nor the names of its contributors
17c19800e8SDoug Rabson.\"    may be used to endorse or promote products derived from this software
18c19800e8SDoug Rabson.\"    without specific prior written permission.
19c19800e8SDoug Rabson.\"
20c19800e8SDoug Rabson.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
21c19800e8SDoug Rabson.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22c19800e8SDoug Rabson.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23c19800e8SDoug Rabson.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
24c19800e8SDoug Rabson.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25c19800e8SDoug Rabson.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26c19800e8SDoug Rabson.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27c19800e8SDoug Rabson.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28c19800e8SDoug Rabson.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29c19800e8SDoug Rabson.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30c19800e8SDoug Rabson.\" SUCH DAMAGE.
31c19800e8SDoug Rabson.\"
32*ae771770SStanislav Sedov.\" $Id$
33c19800e8SDoug Rabson.\"
34c19800e8SDoug Rabson.Dd April 10, 2007
35b528cefcSMark Murray.Dt KSTASH 8
36b528cefcSMark Murray.Os HEIMDAL
37b528cefcSMark Murray.Sh NAME
38b528cefcSMark Murray.Nm kstash
3945524cd7SAssar Westerlund.Nd "store the KDC master password in a file"
40b528cefcSMark Murray.Sh SYNOPSIS
41b528cefcSMark Murray.Nm
42c19800e8SDoug Rabson.Bk -words
435e9cd1aeSAssar Westerlund.Oo Fl e Ar string \*(Ba Xo
44*ae771770SStanislav Sedov.Fl Fl enctype= Ns Ar string
455e9cd1aeSAssar Westerlund.Xc
46adb0ddaeSAssar Westerlund.Oc
475e9cd1aeSAssar Westerlund.Oo Fl k Ar file \*(Ba Xo
48*ae771770SStanislav Sedov.Fl Fl key-file= Ns Ar file
495e9cd1aeSAssar Westerlund.Xc
50adb0ddaeSAssar Westerlund.Oc
51*ae771770SStanislav Sedov.Op Fl Fl convert-file
52*ae771770SStanislav Sedov.Op Fl Fl random-key
53*ae771770SStanislav Sedov.Op Fl Fl master-key-fd= Ns Ar fd
54*ae771770SStanislav Sedov.Op Fl Fl random-key
55*ae771770SStanislav Sedov.Op Fl h | Fl Fl help
56*ae771770SStanislav Sedov.Op Fl Fl version
57c19800e8SDoug Rabson.Ek
58b528cefcSMark Murray.Sh DESCRIPTION
59b528cefcSMark Murray.Nm
605e9cd1aeSAssar Westerlundreads the Kerberos master key and stores it in a file that will be
615e9cd1aeSAssar Westerlundused by the KDC.
62b528cefcSMark Murray.Pp
635e9cd1aeSAssar WesterlundSupported options:
64b528cefcSMark Murray.Bl -tag -width Ds
65*ae771770SStanislav Sedov.It Fl e Ar string , Fl Fl enctype= Ns Ar string
66c19800e8SDoug Rabsonthe encryption type to use, defaults to DES3-CBC-SHA1.
67*ae771770SStanislav Sedov.It Fl k Ar file , Fl Fl key-file= Ns Ar file
68c19800e8SDoug Rabsonthe name of the master key file.
69*ae771770SStanislav Sedov.It Fl Fl convert-file
705e9cd1aeSAssar Westerlunddon't ask for a new master key, just read an old master key file, and
71c19800e8SDoug Rabsonwrite it back in the new keyfile format.
72*ae771770SStanislav Sedov.It Fl Fl random-key
73c19800e8SDoug Rabsongenerate a random master key.
74*ae771770SStanislav Sedov.It Fl Fl master-key-fd= Ns Ar fd
755e9cd1aeSAssar Westerlundfiledescriptor to read passphrase from, if not specified the
76c19800e8SDoug Rabsonpassphrase will be read from the terminal.
77b528cefcSMark Murray.El
785e9cd1aeSAssar Westerlund.\".Sh ENVIRONMENT
79c19800e8SDoug Rabson.Sh FILES
80c19800e8SDoug Rabson.Pa /var/heimdal/m-key
81c19800e8SDoug Rabsonis the default keyfile if no other keyfile is specified.
82c19800e8SDoug RabsonThe format of a Heimdal master key is the same as a keytab, so
83c19800e8SDoug Rabson.Nm ktutil
84c19800e8SDoug Rabsonlist can be used to list the content of the file.
855e9cd1aeSAssar Westerlund.\".Sh EXAMPLES
865e9cd1aeSAssar Westerlund.\".Sh DIAGNOSTICS
87b528cefcSMark Murray.Sh SEE ALSO
88b528cefcSMark Murray.Xr kdc 8
895e9cd1aeSAssar Westerlund.\".Sh STANDARDS
905e9cd1aeSAssar Westerlund.\".Sh HISTORY
915e9cd1aeSAssar Westerlund.\".Sh AUTHORS
925e9cd1aeSAssar Westerlund.\".Sh BUGS
93