From 6d759d7dcb37427a6cc42e5553a03ce23fe00ae5 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 25 Feb 2008 14:56:09 -0500 Subject: Move ipa-getkeytab man page into proper subdir 433878 --- ipa-client/Makefile.am | 1 + ipa-client/configure.ac | 1 + ipa-client/ipa-client.spec | 9 ++++-- ipa-client/ipa-client.spec.in | 9 ++++-- ipa-client/man/Makefile.am | 6 ++++ ipa-client/man/ipa-getkeytab.1 | 63 ++++++++++++++++++++++++++++++++++++++++++ 6 files changed, 83 insertions(+), 6 deletions(-) create mode 100644 ipa-client/man/Makefile.am create mode 100644 ipa-client/man/ipa-getkeytab.1 (limited to 'ipa-client') diff --git a/ipa-client/Makefile.am b/ipa-client/Makefile.am index ff5fbb75..3379eea8 100644 --- a/ipa-client/Makefile.am +++ b/ipa-client/Makefile.am @@ -38,6 +38,7 @@ SUBDIRS = \ firefox \ ipaclient \ ipa-install \ + man \ $(NULL) EXTRA_DIST = \ diff --git a/ipa-client/configure.ac b/ipa-client/configure.ac index f77aa6b2..5718f8fe 100644 --- a/ipa-client/configure.ac +++ b/ipa-client/configure.ac @@ -167,6 +167,7 @@ AC_CONFIG_FILES([ firefox/Makefile ipaclient/Makefile ipa-install/Makefile + man/Makefile ]) AC_OUTPUT diff --git a/ipa-client/ipa-client.spec b/ipa-client/ipa-client.spec index 449f51d1..8ed7208d 100755 --- a/ipa-client/ipa-client.spec +++ b/ipa-client/ipa-client.spec @@ -1,6 +1,6 @@ Name: ipa-client Version: 0.99.0 -Release: 1%{?dist} +Release: 2%{?dist} Summary: IPA client Group: System Environment/Base @@ -46,7 +46,12 @@ rm -rf %{buildroot} %dir %{python_sitelib}/ipaclient %{python_sitelib}/ipaclient/*.py* +%{_mandir}/man1/* + %changelog +* Mon Feb 25 2008 Rob Crittenden - 0.99.0-2 +- Add ipa-getkeytab man page + * Thu Feb 21 2008 Rob Crittenden - 0.99.0-1 - Version bump for release @@ -71,5 +76,3 @@ rm -rf %{buildroot} * Thu Aug 16 2007 Simo Sorce - 0.1.0-1 - Initial rpm version - - diff --git a/ipa-client/ipa-client.spec.in b/ipa-client/ipa-client.spec.in index fa154b24..d46c89fe 100644 --- a/ipa-client/ipa-client.spec.in +++ b/ipa-client/ipa-client.spec.in @@ -1,6 +1,6 @@ Name: ipa-client Version: VERSION -Release: 1%{?dist} +Release: 2%{?dist} Summary: IPA client Group: System Environment/Base @@ -46,7 +46,12 @@ rm -rf %{buildroot} %dir %{python_sitelib}/ipaclient %{python_sitelib}/ipaclient/*.py* +%{_mandir}/man1/* + %changelog +* Mon Feb 25 2008 Rob Crittenden - 0.99.0-2 +- Add ipa-getkeytab man page + * Thu Feb 21 2008 Rob Crittenden - 0.99.0-1 - Version bump for release @@ -71,5 +76,3 @@ rm -rf %{buildroot} * Thu Aug 16 2007 Simo Sorce - 0.1.0-1 - Initial rpm version - - diff --git a/ipa-client/man/Makefile.am b/ipa-client/man/Makefile.am new file mode 100644 index 00000000..3e28fe1b --- /dev/null +++ b/ipa-client/man/Makefile.am @@ -0,0 +1,6 @@ +# This file will be processed with automake-1.7 to create Makefile.in + +AUTOMAKE_OPTIONS = 1.7 + +man_MANS = ipa-getkeytab.1 + diff --git a/ipa-client/man/ipa-getkeytab.1 b/ipa-client/man/ipa-getkeytab.1 new file mode 100644 index 00000000..3ca1b458 --- /dev/null +++ b/ipa-client/man/ipa-getkeytab.1 @@ -0,0 +1,63 @@ +.\" A man page for ipa-getkeytab +.\" Copyright (C) 2007 Red Hat, Inc. +.\" +.\" This is free software; you can redistribute it and/or modify it under +.\" the terms of the GNU Library General Public License as published by +.\" the Free Software Foundation; version 2 only +.\" +.\" This program is distributed in the hope that it will be useful, but +.\" WITHOUT ANY WARRANTY; without even the implied warranty of +.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +.\" General Public License for more details. +.\" +.\" You should have received a copy of the GNU Library General Public +.\" License along with this program; if not, write to the Free Software +.\" Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +.\" +.\" Author: Karl MacMillan +.\" +.TH "ipa-getkeytab" "1" "Oct 10 2007" "freeipa" "" +.SH "NAME" +ipa\-getkeytab \- Get a keytab for a kerberos principal +.SH "SYNOPSIS" +ipa\-getkeytab [\fI-a\fR] \fIprincipal-name\fR \fIfile-name\fR + +.SH "DESCRIPTION" +Retrieves a kerberos \fIkeytab\fR and optionally adds a +service \fIprincipal\fR. + +Kerberos keytabs are used for services (like sshd) to +perform kerberos authentication. A keytab is a file +with one or more secrets (or keys) for a kerberos +principal. + +A kerberos service principal is a kerberos identity +that can be used for authentication. Service principals +contain the name of the service, the hostname of the +server, and the realm name. For example, the following +is an example principal for an ldap server: + + ldap/foo.example.com@EXAMPLE.COM + +When using ipa-getkeytab the realm name is already +provided, so the principal name is just the service +name and hostname (ldap/foo.example.com from the +example above). + +\fBWARNING:\fR retrieving the keytab resets the secret +rendering all other keytabs for that principal invalid. + +.SH "OPTIONS" +.TP +\fB\-a\fR +Add the service principal in addition to getting the keytab + +.SH "EXAMPLES" + +Add and retrieve a keytab for the ldap service principal on +the host foo.example.com and save it in the file ldap.keytab. + + # ipa-getkeytab -a ldap/foo.example.com ldap.keytab + +.SH "EXIT STATUS" +The exit status is 0 on success, nonzero on error. -- cgit