KEYLOGIN(1) User Commands KEYLOGIN(1)

NAME

keylogin - decrypt and store secret key with keyserv

SYNOPSIS

/usr/bin/keylogin [-r]

DESCRIPTION

The keylogin command prompts for a password, and uses it to decrypt the
user's secret key. The key can be found in the /etc/publickey file (see
publickey(5)) or the NIS map ``publickey.byname'' in the user's home
domain. The sources and their lookup order are specified in the
/etc/nsswitch.conf file. See nsswitch.conf(5). Once decrypted, the
user's secret key is stored by the local key server process, keyserv(8).
This stored key is used when issuing requests to any secure RPC services,
such as NFS. The program keylogout(1) can be used to delete the key
stored by keyserv .


keylogin fails if it cannot get the caller's key, or the password given
is incorrect. For a new user or host, a new key can be added using
newkey(8).

OPTIONS

The following options are supported:

-r
Update the /etc/.rootkey file. This file holds the unencrypted
secret key of the superuser. Only the superuser can use this
option. It is used so that processes running as superuser can issue
authenticated requests without requiring that the administrator
explicitly run keylogin as superuser at system startup time. See
keyserv(8). The -r option should be used by the administrator when
the host's entry in the publickey database has changed, and the
/etc/.rootkey file has become out-of-date with respect to the
actual key pair stored in the publickey database. The permissions
on the /etc/.rootkey file are such that it can be read and written
by the superuser but by no other user on the system.

FILES

/etc/.rootkey
superuser's secret key

SEE ALSO

chkey(1), keylogout(1), login(1), nsswitch.conf(5), publickey(5),
attributes(7), keyserv(8), newkey(8)

February 25, 2017 KEYLOGIN(1)