sprinkle @kbd{}
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21991 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -606,7 +606,7 @@ To read more about the requirements, see RFC3920, Extensible Messaging
|
|||||||
and Presence Protocol (XMPP): Core.
|
and Presence Protocol (XMPP): Core.
|
||||||
|
|
||||||
hxtool issue-certificate have support to add jid to the certificate
|
hxtool issue-certificate have support to add jid to the certificate
|
||||||
using the option --jid.
|
using the option @kbd{--jid}.
|
||||||
|
|
||||||
@example
|
@example
|
||||||
hxtool issue-certificate \
|
hxtool issue-certificate \
|
||||||
|
@@ -127,14 +127,14 @@ Verifying password - Master key:
|
|||||||
@end example
|
@end example
|
||||||
|
|
||||||
If you want to generate a random master key you can use the
|
If you want to generate a random master key you can use the
|
||||||
--random-key flag to kstash. This will make sure you have a good key
|
@kbd{--random-key} flag to kstash. This will make sure you have a good key
|
||||||
on which attackers can't do a dictionary attack.
|
on which attackers can't do a dictionary attack.
|
||||||
|
|
||||||
If you have a master key, make sure you make a backup of your master
|
If you have a master key, make sure you make a backup of your master
|
||||||
key file; without it backups of the database are of no use.
|
key file; without it backups of the database are of no use.
|
||||||
|
|
||||||
To initialise the database use the @command{kadmin} program, with the
|
To initialise the database use the @command{kadmin} program, with the
|
||||||
@samp{-l} option (to enable local database mode). First issue a
|
@kbd{-l} option (to enable local database mode). First issue a
|
||||||
@kbd{init MY.REALM} command. This will create the database and insert
|
@kbd{init MY.REALM} command. This will create the database and insert
|
||||||
default principals for that realm. You can have more than one realm in
|
default principals for that realm. You can have more than one realm in
|
||||||
one database, so @samp{init} does not destroy any old database.
|
one database, so @samp{init} does not destroy any old database.
|
||||||
@@ -1048,7 +1048,7 @@ lha/admin@@EXAMPLE.ORG's Password:
|
|||||||
@end example
|
@end example
|
||||||
|
|
||||||
To get a Kerberos credential file for the service, use kinit in the
|
To get a Kerberos credential file for the service, use kinit in the
|
||||||
--keytab mode. This will not ask for a password but instead fetch the
|
@kbd{--keytab} mode. This will not ask for a password but instead fetch the
|
||||||
key from the keytab.
|
key from the keytab.
|
||||||
|
|
||||||
@example
|
@example
|
||||||
|
@@ -216,7 +216,7 @@ database. Make sure it has a DES key.
|
|||||||
@item Run @kbd{ktutil add} to add the key for that principal to a
|
@item Run @kbd{ktutil add} to add the key for that principal to a
|
||||||
keytab.
|
keytab.
|
||||||
@item Run @kbd{appl/test/nt_gss_server -p 2000 -s authsamp
|
@item Run @kbd{appl/test/nt_gss_server -p 2000 -s authsamp
|
||||||
--dump-auth=@var{file}} where @var{file} is an appropriate file.
|
@kbd{--dump-auth}=@var{file}} where @var{file} is an appropriate file.
|
||||||
@item It should authenticate and dump for you the authorisation data in
|
@item It should authenticate and dump for you the authorisation data in
|
||||||
the file.
|
the file.
|
||||||
@item The tool @kbd{lib/asn1/asn1_print} is somewhat useful for
|
@item The tool @kbd{lib/asn1/asn1_print} is somewhat useful for
|
||||||
|
Reference in New Issue
Block a user