xref: /freebsd/usr.sbin/keyserv/keyserv.8 (revision b2c76c41be32f904179efed29c0ca04d53f3996c)
1.\" @(#)keyserv.1m 1.21 93/07/14 SMI; from SVr4
2.\"macro stdmacro
3.\" Copyright 1989 AT&T
4.\" @(#)keyserv.8c 1.8 89/03/29 SMI;
5.\".TH KEYSERV 8C "9 September 1987"
6.Dd September 14, 1992
7.Dt KEYSERV 8
8.Os
9.Sh NAME
10.Nm keyserv
11.Nd server for storing private encryption keys
12.Sh SYNOPSIS
13.Nm
14.Op Fl d
15.Op Fl D
16.Op Fl n
17.Op Fl p Ar path
18.Op Fl v
19.Sh DESCRIPTION
20The
21.Nm
22utility is a daemon that is used for storing the
23private encryption keys of each
24user logged into the system.
25These encryption keys are used for accessing
26secure network services such as secure
27.Tn NFS .
28.Pp
29Normally, root's key is read from the file
30.Pa /etc/.rootkey
31when the daemon is started.
32This is useful during power-fail reboots
33when no one is around to type a password.
34.Pp
35If a client with no secret key calls
36.Nm ,
37then the key of user
38.Em nobody
39is used instead as the default key.
40.Pp
41The following options are available:
42.Bl -tag -width indent
43.It Fl d
44Disable the use of default keys for
45.Em nobody .
46.It Fl D
47Run in debugging mode and log all requests to
48.Nm .
49.It Fl n
50Root's secret key is not read from
51.Pa /etc/.rootkey .
52Instead,
53.Nm
54prompts the user for the password to decrypt
55root's key stored in the
56.Pa /etc/publickey
57database and then stores the decrypted key in
58.Pa /etc/.rootkey
59for future use.
60This option is useful if the
61.Pa /etc/.rootkey
62file ever gets out of date or corrupted.
63.It Fl p Ar path
64Specify where to search for
65.Pa libdes.so.3 .
66Default is
67.Pa /usr/lib .
68.It Fl v
69Display status of DES support (enabled/disabled).
70.El
71.Sh FILES
72.Bl -tag -width /usr/lib/libdes.so.3 -compact
73.It Pa /etc/.rootkey
74.It Pa /usr/lib/libdes.so.3
75.El
76.Sh "SEE ALSO"
77.Xr keylogin 1 ,
78.Xr keylogout 1 ,
79.Xr publickey 5
80