.\" Copyright (c) 1980 Regents of the University of California.
.\" All rights reserved.  The Berkeley software License Agreement
.\" specifies the terms and conditions for redistribution.
.\"
.\"	@%G
.\"
.TH MAKE_KEYPAIR 8
.UC 4
.SH NAME
make_keypair
.SH SYNOPSIS
.B make_keypair hostname [ hostname ... ] \- generate Kerberos host key pair
.SH DESCRIPTION
The
.I make_keypair
command
is used to create pairs of DES keys for
each host.
The keys are used by priviledged programs such as
.IR register (1)
to make remote updates to the Kerberos database without
having to have first acquired a Kerberos ticket granting ticket (TGT).
The keys created by
.I make_keypair
are placed (by hand) in the filesystems of the
kerberos server in /etc/kerberosIV/register_keys,
and in the root directory on the clients.
For example, the file /.update.key128.32.130.3 would
contain a copy of the key on the client with
IP address 128.32.130.3.
These keys provide a shared secret which may be used to establish
a secure channel between the client hosts and the Kerberos server.
.SH FILES
.br
/.update.keyxx.xx.xx.xx         shared DES key with server
/etc/kerberosIV/register_keys	server's key storage directory
.SH "SEE ALSO"
register(1), registerd(8), kerberos(1)