Kerberos Server Version 2.0 Release Notes

HP’s Kerberos Server V 2.0 Release Note
What’s in This Version
Chapter 110
kpropd.ini
The kpropd.ini file is the propagation configuration file that the mkpropcf tool creates using
the information from the local krb.conf file. This file is generally located at:
/opt/krb5
Ensure that only authorized users have access to this file. Unauthorized access to kpropd.ini
could jeopardize the integrity of your realm. Intruders who modify or replace entries could
also modify your principal database.
mkpropcf
The mkpropcf tool creates the kpropd.ini file, which is the default propagation configuration
file in a propagation hierarchy. This file is located at the following directory:
/opt/krb5/install
When mkpropcf is executed on the primary security server without any arguments, it creates
the krpopd.ini file in the /opt/krb5 directory. mkpropcf derives the information from the
primary security server’s krb.conf file and takes into accountonly those security servers that
have been configured in the default realm, as specified in the krb.conf file.
Refer to man kpropd.ini for more details.
prpadmin
The propagation tool, prpadmin, is an administrative application that runs on all security
servers and helps you manage the propagation system. For example, to propagate the full
contents of the primary principal database to all secondary security servers, execute the
prpadmin full_dump command on the primary security server.
This tool is located at:
/opt/krb5/admin
You can run prpadmin from the command line or in a shell-like command loop.
Manually control propagation on
one or more servers once
propagation is configured and
started.
prpadmin
Table 1-1 Propagation Tools (Continued)
If You Want To: Use This Tool: