HP-UX Reference (11i v2 07/12) - 1 User Commands A-M (vol 1)

ManualsBrandsHP ManualsSoftwareHP-UX Reference Manuals

451

452

453

454

455

456

457

458

459

460

keylogin(1) keylogin(1)

NAME

keylogin - decrypt and store secret key with keyserv

SYNOPSIS

/usr/bin/keylogin

[ -r ]

DESCRIPTION

The

keylogin command prompts for a password, and uses it to decrypt the user’s secret key. The key

may be found in the /etc/publickey

ﬁle (see publickey(4)) or the NIS map ‘‘publickey.byname’’ or the

NIS+ table ‘‘cred.org_dir’’ in the user’s home domain. The sources and their lookup order are speciﬁed in

the

/etc/nsswitch.conf

ﬁle (see nsswitch.conf(4)). Once decrypted, the user’s secret key is stored by

the local key server process, keyserv(1M). This stored key is used when issuing requests to any secure RPC

services, such as NIS+. The program keylogout(1) can be used to delete the key stored by

keyserv.

keylogin will fail if it cannot get the caller’s key, or the password given is incorrect. For a new user or

host, a new key can be added using newkey(1M), nisaddcred(1M), or nisclient(1M).

Options

-r Update the /etc/.rootkey

ﬁle. This ﬁle holds the unencrypted secret key of the super-user.

Only the super-user may use this option. It is used so that processes running as super-user can issue

authenticated requests without requiring that the administrator explicitly run

keylogin as super-

user at system startup time (see keyserv(1M)). The

-r option should be used by the administrator

when the host’s entry in the publickey database has changed, and the /etc/.rootkey

ﬁle has

become out-of-date with respect to the actual key pair stored in the publickey database. The permis-

sions on the

/etc/.rootkey ﬁle are such that it may be read and written by the super-user but by

no other user on the system.

AUTHOR

keylogin was developed by Sun Microsystems, Inc.

FILES

/etc/.rootkey Super-user’s secret key