2 .\" Copyright 1987, 1989 by the Student Information Processing Board of the Massachusetts Institute of Technology. For copying and distribution information, please see the file kerberosv5/mit-sipb-copyright.h.
3 .\" Portions Copyright (c) 2006, Sun Microsystems, Inc. All Rights Reserved.
4 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
5 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
6 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
7 .TH KPROP 8 "Oct 29, 2015"
9 kprop \- Kerberos database propagation program
13 \fB/usr/lib/krb5/kprop\fR [\fB-d\fR] [\fB-f\fR \fIfile\fR] [\fB-p\fR \fIport-number\fR]
14 [\fB-r\fR \fIrealm\fR] [\fB-s\fR \fIkeytab\fR] [\fIhost\fR]
20 \fBkprop\fR is a command-line utility used for propagating a Kerberos database
21 from a master \fBKDC\fR to a slave \fBKDC\fR. This command must be run on the
22 master \fBKDC\fR. See the \fISolaris System Administration Guide, Vol. 6\fR on
23 how to set up periodic propagation between the master \fBKDC\fR and slave
27 To propagate a Kerberos database, the following conditions must be met:
32 The slave \fBKDC\fRs must have an \fB/etc/krb5/kpropd.acl\fR file that contains
33 the principals for the master \fBKDC\fR and all the slave \fBKDC\fRs.
39 A keytab containing a host principal entry must exist on each slave \fBKDC\fR.
45 The database to be propagated must be dumped to a file using
51 The following options are supported:
58 Enable debug mode. Default is debug mode disabled.
64 \fB\fB-f\fR \fIfile\fR\fR
67 File to be sent to the slave \fBKDC\fR. Default is the
68 \fB/var/krb5/slave_datatrans\fR file.
74 \fB\fB-p\fR \fIport-number\fR\fR
77 Propagate \fIport-number\fR. Default is port \fB754\fR.
83 \fB\fB-r\fR \fIrealm\fR\fR
86 Realm where propagation will occur. Default \fIrealm\fR is the local realm.
92 \fB\fB-s\fR \fIkeytab\fR\fR
95 Location of the keytab. Default location is \fB/etc/krb5/krb5.keytab\fR.
101 The following operands are supported:
108 Name of the slave \fBKDC\fR.
113 \fBExample 1 \fRPropagating the Kerberos Database
116 The following example propagates the Kerberos database from the
117 \fB/tmp/slave_data\fR file to the slave \fBKDC\fR \fBlondon\fR. The machine
118 \fBlondon\fR must have a host principal keytab entry and the \fBkpropd.acl\fR
119 file must contain an entry for the all the \fBKDC\fRs.
124 # kprop -f /tmp/slave_data london
133 \fB\fB/etc/krb5/kpropd.acl\fR\fR
136 List of principals of all the KDCs; resides on each slave KDC.
142 \fB\fB/etc/krb5/krb5.keytab\fR\fR
145 Keytab for Kerberos clients.
151 \fB\fB/var/krb5/slave_datatrans\fR\fR
154 Kerberos database propagated to the KDC slaves.
160 \fBkpasswd\fR(1), \fBsvcs\fR(1), \fBinetadm\fR(8),
161 \fBinetd\fR(8), \fBkadmind\fR(8), \fBkadmin.local\fR(8),
162 \fBkdb5_util\fR(8), \fBsvcadm\fR(8), \fBkadm5.acl\fR(4), \fBkdc.conf\fR(4),
163 \fBattributes\fR(5), \fBkerberos\fR(5), \fBsmf\fR(5)