blob: dee00cf81790eb1e08c6025379ecf0c8cd6ab8b8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
.\" krb524/krb524d.M
.\"
.\" Copyright 1990 by the Massachusetts Institute of Technology.
.\"
.\" Export of this software from the United States of America may
.\" require a specific license from the United States Government.
.\" It is the responsibility of any person or organization contemplating
.\" export to obtain such a license before exporting.
.\"
.\" WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
.\" distribute this software and its documentation for any purpose and
.\" without fee is hereby granted, provided that the above copyright
.\" notice appear in all copies and that both that copyright notice and
.\" this permission notice appear in supporting documentation, and that
.\" the name of M.I.T. not be used in advertising or publicity pertaining
.\" to distribution of the software without specific, written prior
.\" permission. Furthermore if you modify this software you must label
.\" your software as modified software and not distribute it in such a
.\" fashion that it might be confused with the original M.I.T. software.
.\" M.I.T. makes no representations about the suitability of
.\" this software for any purpose. It is provided "as is" without express
.\" or implied warranty.
.\" "
.TH KRB524D 8
.SH NAME
krb524d \- Version 5 to Version 4 Credentials Conversion Daemon
.SH SYNOPSIS
.B krb524d
[
.B \-m[aster]
|
.B \-k[eytab]
] [
.B \-r
.I realm
] [
.B \-nofork
] [
.B \-p
.I portnum
]
.br
.SH DESCRIPTION
.I krb524d
is the Kerberos Version 5 to Version 4 Credentials Conversion daemon.
It works in conjuction with a krb5kdc to allow clients to acquire Kerberos
version 4 tickets from Kerberos version 5 tickets without specifying a password.
.SH OPTIONS
.TP
\fB\-m[aster]\fP
Use the KDC database to convert credentials. This option cannot be combined with
\fB\-k[eytab]\fP.
.TP
\fB\-k[eytab]\fP
Use the default keytab to convert credentials. This option cannot be combined with
\fB\-m[aster]\fP.
.TP
\fB\-r\fP \fIrealm\fP
Convert credentials for \fIrealm\fP; by default the realm returned by
.IR krb5_default_local_realm (3)
is used.
.TP
\fB\-nofork\fP
specifies that krb524d not fork on launch. Useful for debugging purposes.
.TP
\fB\-p\fP \fIportnum\fP
specifies the default UDP port number which krb524d should listen on for
Kerberos 524 requests. This value is used when no port is specified in
the KDC profile and when no port is specified in the Kerberos configuration
file.
If no value is available, then the value in /etc/services for service
"krb524" is used.
.SH SEE ALSO
kerberos(1), krb5kdc(8), kdb5_util(8), kdc.conf(5)
|
