Use "Fl Fl" for long options.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
This commit is contained in:
Thomas Klausner
2011-05-21 18:42:36 +02:00
committed by Love Hornquist Astrand
parent 05a432aaed
commit db8e287e41
35 changed files with 588 additions and 588 deletions

View File

@@ -41,36 +41,36 @@
.Nm
.Bk -words
.Oo Fl m Ar file \*(Ba Xo
.Fl -master-key= Ns Pa file
.Fl Fl master-key= Ns Pa file
.Xc
.Oc
.Oo Fl d Ar file \*(Ba Xo
.Fl -database= Ns Pa file
.Fl Fl database= Ns Pa file
.Xc
.Oc
.Op Fl -source= Ns Ar heimdal|mit-dump
.Op Fl Fl source= Ns Ar heimdal|mit-dump
.Oo Fl r Ar string \*(Ba Xo
.Fl -v4-realm= Ns Ar string
.Fl Fl v4-realm= Ns Ar string
.Xc
.Oc
.Oo Fl c Ar cell \*(Ba Xo
.Fl -cell= Ns Ar cell
.Fl Fl cell= Ns Ar cell
.Xc
.Oc
.Oo Fl k Ar keytab \*(Ba Xo
.Fl -keytab= Ns Ar keytab
.Fl Fl keytab= Ns Ar keytab
.Xc
.Oc
.Oo Fl R Ar string \*(Ba Xo
.Fl -v5-realm= Ns Ar string
.Fl Fl v5-realm= Ns Ar string
.Xc
.Oc
.Op Fl D | Fl -decrypt
.Op Fl E | Fl -encrypt
.Op Fl n | Fl -stdout
.Op Fl v | Fl -verbose
.Op Fl -version
.Op Fl h | Fl -help
.Op Fl D | Fl Fl decrypt
.Op Fl E | Fl Fl encrypt
.Op Fl n | Fl Fl stdout
.Op Fl v | Fl Fl verbose
.Op Fl Fl version
.Op Fl h | Fl Fl help
.Op Ar host Ns Op : Ns Ar port
.Ar ...
.Ek
@@ -89,11 +89,11 @@ specified on the command by opening a TCP connection to port 754
.Pp
Supported options:
.Bl -tag -width Ds
.It Fl m Ar file , Fl -master-key= Ns Pa file
.It Fl m Ar file , Fl Fl master-key= Ns Pa file
Where to find the master key to encrypt or decrypt keys with.
.It Fl d Ar file , Fl -database= Ns Pa file
.It Fl d Ar file , Fl Fl database= Ns Pa file
The database to be propagated.
.It Fl -source= Ns Ar heimdal|mit-dump|krb4-dump|kaserver
.It Fl Fl source= Ns Ar heimdal|mit-dump|krb4-dump|kaserver
Specifies the type of the source database. Alternatives include:
.Pp
.Bl -tag -width mit-dump -compact -offset indent
@@ -102,21 +102,21 @@ a Heimdal database
.It mit-dump
a MIT Kerberos 5 dump file
.El
+.It Fl k Ar keytab , Fl -keytab= Ns Ar keytab
+.It Fl k Ar keytab , Fl Fl keytab= Ns Ar keytab
The keytab to use for fetching the key to be used for authenticating
to the propagation daemon(s). The key
.Pa hprop/hostname
is used from this keytab. The default is to fetch the key from the
KDC database.
.It Fl R Ar string , Fl -v5-realm= Ns Ar string
.It Fl R Ar string , Fl Fl v5-realm= Ns Ar string
Local realm override.
.It Fl D , Fl -decrypt
.It Fl D , Fl Fl decrypt
The encryption keys in the database can either be in clear, or
encrypted with a master key. This option transmits the database with
unencrypted keys.
.It Fl E , Fl -encrypt
.It Fl E , Fl Fl encrypt
This option transmits the database with encrypted keys.
.It Fl n , Fl -stdout
.It Fl n , Fl Fl stdout
Dump the database on stdout, in a format that can be fed to hpropd.
.El
.Sh EXAMPLES

View File

@@ -41,17 +41,17 @@
.Nm
.Bk -words
.Oo Fl d Ar file \*(Ba Xo
.Fl -database= Ns Ar file
.Fl Fl database= Ns Ar file
.Xc
.Oc
.Op Fl n | Fl -stdin
.Op Fl -print
.Op Fl i | Fl -no-inetd
.Op Fl n | Fl Fl stdin
.Op Fl Fl print
.Op Fl i | Fl Fl no-inetd
.Oo Fl k Ar keytab \*(Ba Xo
.Fl -keytab= Ns Ar keytab
.Fl Fl keytab= Ns Ar keytab
.Xc
.Oc
.Op Fl 4 | Fl -v4dump
.Op Fl 4 | Fl Fl v4dump
.Ek
.Sh DESCRIPTION
.Nm
@@ -73,17 +73,17 @@ are accepted.
.Pp
Options supported:
.Bl -tag -width Ds
.It Fl d Ar file , Fl -database= Ns Ar file
.It Fl d Ar file , Fl Fl database= Ns Ar file
database
.It Fl n , Fl -stdin
.It Fl n , Fl Fl stdin
read from stdin
.It Fl -print
.It Fl Fl print
print dump to stdout
.It Fl i , Fl -no-inetd
.It Fl i , Fl Fl no-inetd
not started from inetd
.It Fl k Ar keytab , Fl -keytab= Ns Ar keytab
.It Fl k Ar keytab , Fl Fl keytab= Ns Ar keytab
keytab to use for authentication
.It Fl 4 , Fl -v4dump
.It Fl 4 , Fl Fl v4dump
create v4 type DB
.El
.Sh SEE ALSO

View File

@@ -41,27 +41,27 @@
.Nm
.Bk -words
.Oo Fl c Ar file \*(Ba Xo
.Fl -config-file= Ns Ar file
.Fl Fl config-file= Ns Ar file
.Xc
.Oc
.Op Fl p | Fl -no-require-preauth
.Op Fl -max-request= Ns Ar size
.Op Fl H | Fl -enable-http
.Op Fl -no-524
.Op Fl -kerberos4
.Op Fl -kerberos4-cross-realm
.Op Fl p | Fl Fl no-require-preauth
.Op Fl Fl max-request= Ns Ar size
.Op Fl H | Fl Fl enable-http
.Op Fl Fl no-524
.Op Fl Fl kerberos4
.Op Fl Fl kerberos4-cross-realm
.Oo Fl r Ar string \*(Ba Xo
.Fl -v4-realm= Ns Ar string
.Fl Fl v4-realm= Ns Ar string
.Xc
.Oc
.Op Fl K | Fl -kaserver
.Op Fl K | Fl Fl kaserver
.Oo Fl P Ar portspec \*(Ba Xo
.Fl -ports= Ns Ar portspec
.Fl Fl ports= Ns Ar portspec
.Xc
.Oc
.Op Fl -detach
.Op Fl -disable-des
.Op Fl -addresses= Ns Ar list of addresses
.Op Fl Fl detach
.Op Fl Fl disable-des
.Op Fl Fl addresses= Ns Ar list of addresses
.Ek
.Sh DESCRIPTION
.Nm
@@ -72,11 +72,11 @@ or from a default compiled-in value.
.Pp
Options supported:
.Bl -tag -width Ds
.It Fl c Ar file , Fl -config-file= Ns Ar file
.It Fl c Ar file , Fl Fl config-file= Ns Ar file
Specifies the location of the config file, the default is
.Pa /var/heimdal/kdc.conf .
This is the only value that can't be specified in the config file.
.It Fl p , Fl -no-require-preauth
.It Fl p , Fl Fl no-require-preauth
Turn off the requirement for pre-autentication in the initial AS-REQ
for all principals.
The use of pre-authentication makes it more difficult to do offline
@@ -89,20 +89,20 @@ pre-athentication.
The default is to require pre-authentication.
Adding the require-preauth per principal is a more flexible way of
handling this.
.It Fl -max-request= Ns Ar size
.It Fl Fl max-request= Ns Ar size
Gives an upper limit on the size of the requests that the kdc is
willing to handle.
.It Fl H , Fl -enable-http
.It Fl H , Fl Fl enable-http
Makes the kdc listen on port 80 and handle requests encapsulated in HTTP.
.It Fl -no-524
.It Fl Fl no-524
don't respond to 524 requests
.It Fl -kerberos4
.It Fl Fl kerberos4
respond to Kerberos 4 requests
.It Fl -kerberos4-cross-realm
.It Fl Fl kerberos4-cross-realm
respond to Kerberos 4 requests from foreign realms.
This is a known security hole and should not be enabled unless you
understand the consequences and are willing to live with them.
.It Fl r Ar string , Fl -v4-realm= Ns Ar string
.It Fl r Ar string , Fl Fl v4-realm= Ns Ar string
What realm this server should act as when dealing with version 4
requests.
The database can contain any number of realms, but since the version 4
@@ -112,21 +112,21 @@ The default is whatever is returned by
.Fn krb_get_lrealm .
This option is only available if the KDC has been compiled with version
4 support.
.It Fl K , Fl -kaserver
.It Fl K , Fl Fl kaserver
Enable kaserver emulation (in case it's compiled in).
.It Fl P Ar portspec , Fl -ports= Ns Ar portspec
.It Fl P Ar portspec , Fl Fl ports= Ns Ar portspec
Specifies the set of ports the KDC should listen on.
It is given as a
white-space separated list of services or port numbers.
.It Fl -addresses= Ns Ar list of addresses
.It Fl Fl addresses= Ns Ar list of addresses
The list of addresses to listen for requests on.
By default, the kdc will listen on all the locally configured
addresses.
If only a subset is desired, or the automatic detection fails, this
option might be used.
.It Fl -detach
.It Fl Fl detach
detach from pty and run as a daemon.
.It Fl -disable-des
.It Fl Fl disable-des
disable add des encryption types, makes the kdc not use them.
.El
.Pp
@@ -153,7 +153,7 @@ specified as:
.Dl require-preauth = no
.Pp
(in fact you can specify the option as
.Fl -require-preauth=no ) .
.Fl Fl require-preauth=no ) .
.Pp
And there are some configuration options which do not have
command-line equivalents:

View File

@@ -41,19 +41,19 @@
.Nm
.Bk -words
.Oo Fl e Ar string \*(Ba Xo
.Fl -enctype= Ns Ar string
.Fl Fl enctype= Ns Ar string
.Xc
.Oc
.Oo Fl k Ar file \*(Ba Xo
.Fl -key-file= Ns Ar file
.Fl Fl key-file= Ns Ar file
.Xc
.Oc
.Op Fl -convert-file
.Op Fl -random-key
.Op Fl -master-key-fd= Ns Ar fd
.Op Fl -random-key
.Op Fl h | Fl -help
.Op Fl -version
.Op Fl Fl convert-file
.Op Fl Fl random-key
.Op Fl Fl master-key-fd= Ns Ar fd
.Op Fl Fl random-key
.Op Fl h | Fl Fl help
.Op Fl Fl version
.Ek
.Sh DESCRIPTION
.Nm
@@ -62,16 +62,16 @@ used by the KDC.
.Pp
Supported options:
.Bl -tag -width Ds
.It Fl e Ar string , Fl -enctype= Ns Ar string
.It Fl e Ar string , Fl Fl enctype= Ns Ar string
the encryption type to use, defaults to DES3-CBC-SHA1.
.It Fl k Ar file , Fl -key-file= Ns Ar file
.It Fl k Ar file , Fl Fl key-file= Ns Ar file
the name of the master key file.
.It Fl -convert-file
.It Fl Fl convert-file
don't ask for a new master key, just read an old master key file, and
write it back in the new keyfile format.
.It Fl -random-key
.It Fl Fl random-key
generate a random master key.
.It Fl -master-key-fd= Ns Ar fd
.It Fl Fl master-key-fd= Ns Ar fd
filedescriptor to read passphrase from, if not specified the
passphrase will be read from the terminal.
.El

View File

@@ -39,23 +39,23 @@
.Nd map a password into a key
.Sh SYNOPSIS
.Nm
.Op Fl 5 | Fl -version5
.Op Fl 4 | Fl -version4
.Op Fl a | Fl -afs
.Op Fl 5 | Fl Fl version5
.Op Fl 4 | Fl Fl version4
.Op Fl a | Fl Fl afs
.Oo Fl c Ar cell \*(Ba Xo
.Fl -cell= Ns Ar cell
.Fl Fl cell= Ns Ar cell
.Xc
.Oc
.Oo Fl w Ar password \*(Ba Xo
.Fl -password= Ns Ar password
.Fl Fl password= Ns Ar password
.Xc
.Oc
.Oo Fl p Ar principal \*(Ba Xo
.Fl -principal= Ns Ar principal
.Fl Fl principal= Ns Ar principal
.Xc
.Oc
.Oo Fl k Ar string \*(Ba Xo
.Fl -keytype= Ns Ar string
.Fl Fl keytype= Ns Ar string
.Xc
.Oc
.Ar password
@@ -65,21 +65,21 @@ performs the string-to-key function.
This is useful when you want to handle the raw key instead of the password.
Supported options:
.Bl -tag -width Ds
.It Fl 5 , Fl -version5
.It Fl 5 , Fl Fl version5
Output Kerberos v5 string-to-key
.It Fl 4 , Fl -version4
.It Fl 4 , Fl Fl version4
Output Kerberos v4 string-to-key
.It Fl a , Fl -afs
.It Fl a , Fl Fl afs
Output AFS string-to-key
.It Fl c Ar cell , Fl -cell= Ns Ar cell
.It Fl c Ar cell , Fl Fl cell= Ns Ar cell
AFS cell to use
.It Fl w Ar password , Fl -password= Ns Ar password
.It Fl w Ar password , Fl Fl password= Ns Ar password
Password to use
.It Fl p Ar principal , Fl -principal= Ns Ar principal
.It Fl p Ar principal , Fl Fl principal= Ns Ar principal
Kerberos v5 principal to use
.It Fl k Ar string , Fl -keytype= Ns Ar string
.It Fl k Ar string , Fl Fl keytype= Ns Ar string
Keytype
.It Fl -version
.It Fl Fl version
print version
.It Fl -help
.It Fl Fl help
.El