keyserv

 

---

 
 
 
 Maintenance Commands                                  keyserv(1M)
 
 
 


NAME
      keyserv - server for storing private encryption keys
 


SYNOPSIS
      keyserv [ -c ]  [ -d ]  [ -D ]  [ -n ]  [ -s sizespec ]
 


DESCRIPTION
      keyserv is a daemon that is used  for  storing  the  private
      encryption  keys  of each user logged into the system. These
      encryption keys are used for accessing secure  network  ser-
      vices such as secure NFS and NIS+.
 
      Normally, root's key is read  from  the  file  /etc/.rootkey
      when the daemon is started. This is useful during power-fail
      reboots when no one is around to type a password.
 


OPTIONS
      -c    Do not use disk caches. This option overrides  any  -s
            option.
 
      -d    Disable the use of default keys for nobody.
 
      -D    Run  in  debugging  mode  and  log  all  requests   to
            keyserv.
 
      -n    Root's secret key  is  not  read  from  /etc/.rootkey.
            Instead,  keyserv prompts the user for the password to
            decrypt root's key stored in  the  publickey  database
            and then stores the decrypted key in /etc/.rootkey for
            future use. This option is useful if the /etc/.rootkey
            file ever gets out of date or corrupted.
 
      -s sizespec
            Specify the size of the extended Diffie-Hellman common
            key  disk  caches. The sizespec can be one of the fol-
            lowing forms:
 
      mechtype=size
            size is an integer specifying the  maximum  number  of
            entries  in  the cache, or an integer immediately fol-
            lowed by the letter M, denoting the  maximum  size  in
            MB.
 
      size  This form of sizespec applies to all caches.
 
 
      See nisauthconf(1M) for mechanism types. Note that  the  des
      mechanism, AUTH_DES, does not use a disk cache.
 


FILES
      /etc/.rootkey
 
 
 
 
 SunOS 5.8           Last change: 18 Oct 1999                    1
 
 
 
 
 
 
 Maintenance Commands                                  keyserv(1M)
 
 
 


ATTRIBUTES
      See attributes(5) for descriptions of the  following  attri-
      butes:
 
      ____________________________________________________________
     |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
     |_____________________________|_____________________________|
     | Availability                | SUNWcsu                     |
     |_____________________________|_____________________________|
 
 


SEE ALSO
      keylogin(1),  keylogout(1),  nisauthconf(1M),  publickey(4),
      attributes(5)
 


NOTES
      keyserv will not start up if the  system  does  not  have  a
      secure  rpc  domain  configured.  Set  up the domain name by
      using   the   /usr/bin/domainname   command.   Usually   the
      /etc/init.d/inetinit    script   reads   the   domain   from
      /etc/defaultdomain. Invoking the domainname command  without
      arguments tells you if you have a domain set up.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 SunOS 5.8           Last change: 18 Oct 1999                    2
 
 
 

---