--- cygnus/src/slave/kpropd.M Tue Jul 1 14:14:30 1997 +++ kerbnet-1.2/slave/kpropd.M Tue May 27 22:03:40 1997 @@ -17,113 +17,104 @@ .\" permission. M.I.T. makes no representations about the suitability of .\" this software for any purpose. It is provided "as is" without express .\" or implied warranty. -.\" -.\" -.TH KPROPD 8 "Kerberos Version 5.0" "MIT Project Athena" +.\" " +.ds h ""KerbNet -- Kerberos V5" "Cygnus Solutions" +.TH KPROPD 8 \*h .SH NAME kpropd \- Kerberos V5 slave KDC update server .SH SYNOPSIS -.B kprop -[ -.B \-r -.I realm -] [ -.B \-f -.I slave_dumpfile -] [ -.B \-F -.I principal_database -] [ -.B \-p -.I kdb5_edit_prog -] [ -.B \-d -] [ -.B \-S -] [ -.B \-P -.I port -] +.B kpropd +[\fB\-r\fP \fIrealm\fP] [\fB\-f\fP \fIslave_dumpfile\fP] [\fB\-F\fP +\fIprincipal_database\fP] [\fB\-p\fP \fIkdb5_util_prog\fP] [\fB\-d\fP] +[\fB\-S\fP] [\fB\-P\fP \fIport\fP] .br .SH DESCRIPTION .I kpropd -is the server which accepts connections from the +is the server which accepts connections from the .IR kprop (8) program. .I kpropd -accepts the dumped KDC database and places it in a file, and then runs -.IR kdb5_edit (8) -to load the dumped database into the active database which is used by +accepts the dumped KDC database and places it in a file, and then runs +.IR kdb5_util (8) +.I load +to load the dumped database into the active database which is used by .IR krb5kdc (8). -Thus, the master Kerberos server can use +Thus, the master Kerberos server can use .IR kprop (8) -to propagate its database to the slave slavers. Upon a successful download -of the KDC database file, the slave Kerberos server will have an -up-to-date KDC database. +to propagate its database to the slave slavers. Upon a successful +download of the KDC database file, the slave Kerberos server will have +an up-to-date KDC database. .PP -Normally, kpropd is invoked out of +Normally, kpropd is invoked out of .I inetd(8). -This is done by adding a -line to the inetd.conf file which looks like this: +This is done by adding a line to the inetd.conf file which looks like +this: kprop stream tcp nowait root /krb5/bin/kpropd kpropd -However, kpropd can also run as a standalone deamon, if the -.B \-S -option is -turned on. This is done for debugging purposes, or if for some reason -the system administrator just doesn't want to run it out of -.I inetd(8). -.PP -The -.B \-r -.I realm -option specifies the realm of the master server; by default the realm -returned by +However, kpropd can also run as a standalone deamon, if the +.B \-S +option is turned on. This is done for debugging purposes, or if for +some reason the system administrator doesn't want to run it out of +.IR inetd (8). +.SH OPTIONS +.TP +\fB\-r\fP \fIrealm\fP +specifies the realm of the master server; by default the realm returned +by .IR krb5_default_local_realm (3) is used. -.PP -The -.B \-f -.I file -option specifies the filename where the dumped principal database file -is to be stored; by default the dumped database file is KPROPD_DEFAULT_FILE +.TP +\fB\-f\fP \fIfile\fP +specifies the filename where the dumped principal database file is to be +stored; by default the dumped database file is KPROPD_DEFAULT_FILE (normally /krb5/from_master). -.PP -The +.TP .B \-p -option allows the user to specify the pathname to the -.IR kdb5_edit (8) -program; by default the pathname used is KPROPD_DEFAULT_KDB5_EDIT -(normally /krb5/bin/kdb5_edit). -.PP -The +allows the user to specify the pathname to the +.IR kdb5_util (8) +program; by default the pathname used is KPROPD_DEFAULT_KDB5_UTIL +(normally /krb5/bin/kdb5_util). +.TP .B \-S -option turns on standalone mode. Normally, kpropd is invoked out of +turn on standalone mode. Normally, kpropd is invoked out of .IR inetd (8) -and so it expects a network connection to be passed to it from +so it expects a network connection to be passed to it from .I inetd (8). -If the +If the .B \-S option is specified, kpropd will put itself into the background, and wait for connections to the KPROP_SERVICE port (normally krb5_prop). -.PP -The +.TP .B \-d -option turns on debug mode. In this mode, if the +turn on debug mode. In this mode, if the .B \-S -option is selected, +option is selected, .I kpropd will not detach itself from the current job and run in the background. -Instead, it will run in the foreground and print out debugging -messages during the database propagation. -.PP -The +Instead, it will run in the foreground and print out debugging messages +during the database propagation. +.TP .B \-P -option allows for an alternate port number for +allow for an alternate port number for .I kpropd to listen on. This is only useful if the program is run in standalone -mode. +mode. +.SH FILES +.TP "\w'kpropd.acl\ \ 'u" +kpropd.acl +Access file for +.BR kpropd . +Each entry is a line containing the principal of a host from which the +local machine will allow Kerberos database propagation via kprop. +.TP "\w'from_master\ \ 'u" +from_master +Temporary copy of slave dump file. +.TP "\w'from_master.load_log\ \ 'u" +from_master.load_log +All output from the +.BR kdb5_util +.BR load +command is stored for diagnostic purposes. .SH SEE ALSO -kprop(8), kdb5_edit(8), krb5kdc(8), inetd(8) - +kprop(8), kdb5_util(8), krb5kdc(8), inetd(8)