Use "Fl Fl" for long options.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
This commit is contained in:

committed by
Love Hornquist Astrand

parent
05a432aaed
commit
db8e287e41
42
kdc/hprop.8
42
kdc/hprop.8
@@ -41,36 +41,36 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Oo Fl m Ar file \*(Ba Xo
|
||||
.Fl -master-key= Ns Pa file
|
||||
.Fl Fl master-key= Ns Pa file
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl d Ar file \*(Ba Xo
|
||||
.Fl -database= Ns Pa file
|
||||
.Fl Fl database= Ns Pa file
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl -source= Ns Ar heimdal|mit-dump
|
||||
.Op Fl Fl source= Ns Ar heimdal|mit-dump
|
||||
.Oo Fl r Ar string \*(Ba Xo
|
||||
.Fl -v4-realm= Ns Ar string
|
||||
.Fl Fl v4-realm= Ns Ar string
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl c Ar cell \*(Ba Xo
|
||||
.Fl -cell= Ns Ar cell
|
||||
.Fl Fl cell= Ns Ar cell
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl k Ar keytab \*(Ba Xo
|
||||
.Fl -keytab= Ns Ar keytab
|
||||
.Fl Fl keytab= Ns Ar keytab
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl R Ar string \*(Ba Xo
|
||||
.Fl -v5-realm= Ns Ar string
|
||||
.Fl Fl v5-realm= Ns Ar string
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl D | Fl -decrypt
|
||||
.Op Fl E | Fl -encrypt
|
||||
.Op Fl n | Fl -stdout
|
||||
.Op Fl v | Fl -verbose
|
||||
.Op Fl -version
|
||||
.Op Fl h | Fl -help
|
||||
.Op Fl D | Fl Fl decrypt
|
||||
.Op Fl E | Fl Fl encrypt
|
||||
.Op Fl n | Fl Fl stdout
|
||||
.Op Fl v | Fl Fl verbose
|
||||
.Op Fl Fl version
|
||||
.Op Fl h | Fl Fl help
|
||||
.Op Ar host Ns Op : Ns Ar port
|
||||
.Ar ...
|
||||
.Ek
|
||||
@@ -89,11 +89,11 @@ specified on the command by opening a TCP connection to port 754
|
||||
.Pp
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl m Ar file , Fl -master-key= Ns Pa file
|
||||
.It Fl m Ar file , Fl Fl master-key= Ns Pa file
|
||||
Where to find the master key to encrypt or decrypt keys with.
|
||||
.It Fl d Ar file , Fl -database= Ns Pa file
|
||||
.It Fl d Ar file , Fl Fl database= Ns Pa file
|
||||
The database to be propagated.
|
||||
.It Fl -source= Ns Ar heimdal|mit-dump|krb4-dump|kaserver
|
||||
.It Fl Fl source= Ns Ar heimdal|mit-dump|krb4-dump|kaserver
|
||||
Specifies the type of the source database. Alternatives include:
|
||||
.Pp
|
||||
.Bl -tag -width mit-dump -compact -offset indent
|
||||
@@ -102,21 +102,21 @@ a Heimdal database
|
||||
.It mit-dump
|
||||
a MIT Kerberos 5 dump file
|
||||
.El
|
||||
+.It Fl k Ar keytab , Fl -keytab= Ns Ar keytab
|
||||
+.It Fl k Ar keytab , Fl Fl keytab= Ns Ar keytab
|
||||
The keytab to use for fetching the key to be used for authenticating
|
||||
to the propagation daemon(s). The key
|
||||
.Pa hprop/hostname
|
||||
is used from this keytab. The default is to fetch the key from the
|
||||
KDC database.
|
||||
.It Fl R Ar string , Fl -v5-realm= Ns Ar string
|
||||
.It Fl R Ar string , Fl Fl v5-realm= Ns Ar string
|
||||
Local realm override.
|
||||
.It Fl D , Fl -decrypt
|
||||
.It Fl D , Fl Fl decrypt
|
||||
The encryption keys in the database can either be in clear, or
|
||||
encrypted with a master key. This option transmits the database with
|
||||
unencrypted keys.
|
||||
.It Fl E , Fl -encrypt
|
||||
.It Fl E , Fl Fl encrypt
|
||||
This option transmits the database with encrypted keys.
|
||||
.It Fl n , Fl -stdout
|
||||
.It Fl n , Fl Fl stdout
|
||||
Dump the database on stdout, in a format that can be fed to hpropd.
|
||||
.El
|
||||
.Sh EXAMPLES
|
||||
|
24
kdc/hpropd.8
24
kdc/hpropd.8
@@ -41,17 +41,17 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Oo Fl d Ar file \*(Ba Xo
|
||||
.Fl -database= Ns Ar file
|
||||
.Fl Fl database= Ns Ar file
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl n | Fl -stdin
|
||||
.Op Fl -print
|
||||
.Op Fl i | Fl -no-inetd
|
||||
.Op Fl n | Fl Fl stdin
|
||||
.Op Fl Fl print
|
||||
.Op Fl i | Fl Fl no-inetd
|
||||
.Oo Fl k Ar keytab \*(Ba Xo
|
||||
.Fl -keytab= Ns Ar keytab
|
||||
.Fl Fl keytab= Ns Ar keytab
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl 4 | Fl -v4dump
|
||||
.Op Fl 4 | Fl Fl v4dump
|
||||
.Ek
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -73,17 +73,17 @@ are accepted.
|
||||
.Pp
|
||||
Options supported:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl d Ar file , Fl -database= Ns Ar file
|
||||
.It Fl d Ar file , Fl Fl database= Ns Ar file
|
||||
database
|
||||
.It Fl n , Fl -stdin
|
||||
.It Fl n , Fl Fl stdin
|
||||
read from stdin
|
||||
.It Fl -print
|
||||
.It Fl Fl print
|
||||
print dump to stdout
|
||||
.It Fl i , Fl -no-inetd
|
||||
.It Fl i , Fl Fl no-inetd
|
||||
not started from inetd
|
||||
.It Fl k Ar keytab , Fl -keytab= Ns Ar keytab
|
||||
.It Fl k Ar keytab , Fl Fl keytab= Ns Ar keytab
|
||||
keytab to use for authentication
|
||||
.It Fl 4 , Fl -v4dump
|
||||
.It Fl 4 , Fl Fl v4dump
|
||||
create v4 type DB
|
||||
.El
|
||||
.Sh SEE ALSO
|
||||
|
54
kdc/kdc.8
54
kdc/kdc.8
@@ -41,27 +41,27 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Oo Fl c Ar file \*(Ba Xo
|
||||
.Fl -config-file= Ns Ar file
|
||||
.Fl Fl config-file= Ns Ar file
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl p | Fl -no-require-preauth
|
||||
.Op Fl -max-request= Ns Ar size
|
||||
.Op Fl H | Fl -enable-http
|
||||
.Op Fl -no-524
|
||||
.Op Fl -kerberos4
|
||||
.Op Fl -kerberos4-cross-realm
|
||||
.Op Fl p | Fl Fl no-require-preauth
|
||||
.Op Fl Fl max-request= Ns Ar size
|
||||
.Op Fl H | Fl Fl enable-http
|
||||
.Op Fl Fl no-524
|
||||
.Op Fl Fl kerberos4
|
||||
.Op Fl Fl kerberos4-cross-realm
|
||||
.Oo Fl r Ar string \*(Ba Xo
|
||||
.Fl -v4-realm= Ns Ar string
|
||||
.Fl Fl v4-realm= Ns Ar string
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl K | Fl -kaserver
|
||||
.Op Fl K | Fl Fl kaserver
|
||||
.Oo Fl P Ar portspec \*(Ba Xo
|
||||
.Fl -ports= Ns Ar portspec
|
||||
.Fl Fl ports= Ns Ar portspec
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl -detach
|
||||
.Op Fl -disable-des
|
||||
.Op Fl -addresses= Ns Ar list of addresses
|
||||
.Op Fl Fl detach
|
||||
.Op Fl Fl disable-des
|
||||
.Op Fl Fl addresses= Ns Ar list of addresses
|
||||
.Ek
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -72,11 +72,11 @@ or from a default compiled-in value.
|
||||
.Pp
|
||||
Options supported:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl c Ar file , Fl -config-file= Ns Ar file
|
||||
.It Fl c Ar file , Fl Fl config-file= Ns Ar file
|
||||
Specifies the location of the config file, the default is
|
||||
.Pa /var/heimdal/kdc.conf .
|
||||
This is the only value that can't be specified in the config file.
|
||||
.It Fl p , Fl -no-require-preauth
|
||||
.It Fl p , Fl Fl no-require-preauth
|
||||
Turn off the requirement for pre-autentication in the initial AS-REQ
|
||||
for all principals.
|
||||
The use of pre-authentication makes it more difficult to do offline
|
||||
@@ -89,20 +89,20 @@ pre-athentication.
|
||||
The default is to require pre-authentication.
|
||||
Adding the require-preauth per principal is a more flexible way of
|
||||
handling this.
|
||||
.It Fl -max-request= Ns Ar size
|
||||
.It Fl Fl max-request= Ns Ar size
|
||||
Gives an upper limit on the size of the requests that the kdc is
|
||||
willing to handle.
|
||||
.It Fl H , Fl -enable-http
|
||||
.It Fl H , Fl Fl enable-http
|
||||
Makes the kdc listen on port 80 and handle requests encapsulated in HTTP.
|
||||
.It Fl -no-524
|
||||
.It Fl Fl no-524
|
||||
don't respond to 524 requests
|
||||
.It Fl -kerberos4
|
||||
.It Fl Fl kerberos4
|
||||
respond to Kerberos 4 requests
|
||||
.It Fl -kerberos4-cross-realm
|
||||
.It Fl Fl kerberos4-cross-realm
|
||||
respond to Kerberos 4 requests from foreign realms.
|
||||
This is a known security hole and should not be enabled unless you
|
||||
understand the consequences and are willing to live with them.
|
||||
.It Fl r Ar string , Fl -v4-realm= Ns Ar string
|
||||
.It Fl r Ar string , Fl Fl v4-realm= Ns Ar string
|
||||
What realm this server should act as when dealing with version 4
|
||||
requests.
|
||||
The database can contain any number of realms, but since the version 4
|
||||
@@ -112,21 +112,21 @@ The default is whatever is returned by
|
||||
.Fn krb_get_lrealm .
|
||||
This option is only available if the KDC has been compiled with version
|
||||
4 support.
|
||||
.It Fl K , Fl -kaserver
|
||||
.It Fl K , Fl Fl kaserver
|
||||
Enable kaserver emulation (in case it's compiled in).
|
||||
.It Fl P Ar portspec , Fl -ports= Ns Ar portspec
|
||||
.It Fl P Ar portspec , Fl Fl ports= Ns Ar portspec
|
||||
Specifies the set of ports the KDC should listen on.
|
||||
It is given as a
|
||||
white-space separated list of services or port numbers.
|
||||
.It Fl -addresses= Ns Ar list of addresses
|
||||
.It Fl Fl addresses= Ns Ar list of addresses
|
||||
The list of addresses to listen for requests on.
|
||||
By default, the kdc will listen on all the locally configured
|
||||
addresses.
|
||||
If only a subset is desired, or the automatic detection fails, this
|
||||
option might be used.
|
||||
.It Fl -detach
|
||||
.It Fl Fl detach
|
||||
detach from pty and run as a daemon.
|
||||
.It Fl -disable-des
|
||||
.It Fl Fl disable-des
|
||||
disable add des encryption types, makes the kdc not use them.
|
||||
.El
|
||||
.Pp
|
||||
@@ -153,7 +153,7 @@ specified as:
|
||||
.Dl require-preauth = no
|
||||
.Pp
|
||||
(in fact you can specify the option as
|
||||
.Fl -require-preauth=no ) .
|
||||
.Fl Fl require-preauth=no ) .
|
||||
.Pp
|
||||
And there are some configuration options which do not have
|
||||
command-line equivalents:
|
||||
|
26
kdc/kstash.8
26
kdc/kstash.8
@@ -41,19 +41,19 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Oo Fl e Ar string \*(Ba Xo
|
||||
.Fl -enctype= Ns Ar string
|
||||
.Fl Fl enctype= Ns Ar string
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl k Ar file \*(Ba Xo
|
||||
.Fl -key-file= Ns Ar file
|
||||
.Fl Fl key-file= Ns Ar file
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl -convert-file
|
||||
.Op Fl -random-key
|
||||
.Op Fl -master-key-fd= Ns Ar fd
|
||||
.Op Fl -random-key
|
||||
.Op Fl h | Fl -help
|
||||
.Op Fl -version
|
||||
.Op Fl Fl convert-file
|
||||
.Op Fl Fl random-key
|
||||
.Op Fl Fl master-key-fd= Ns Ar fd
|
||||
.Op Fl Fl random-key
|
||||
.Op Fl h | Fl Fl help
|
||||
.Op Fl Fl version
|
||||
.Ek
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -62,16 +62,16 @@ used by the KDC.
|
||||
.Pp
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl e Ar string , Fl -enctype= Ns Ar string
|
||||
.It Fl e Ar string , Fl Fl enctype= Ns Ar string
|
||||
the encryption type to use, defaults to DES3-CBC-SHA1.
|
||||
.It Fl k Ar file , Fl -key-file= Ns Ar file
|
||||
.It Fl k Ar file , Fl Fl key-file= Ns Ar file
|
||||
the name of the master key file.
|
||||
.It Fl -convert-file
|
||||
.It Fl Fl convert-file
|
||||
don't ask for a new master key, just read an old master key file, and
|
||||
write it back in the new keyfile format.
|
||||
.It Fl -random-key
|
||||
.It Fl Fl random-key
|
||||
generate a random master key.
|
||||
.It Fl -master-key-fd= Ns Ar fd
|
||||
.It Fl Fl master-key-fd= Ns Ar fd
|
||||
filedescriptor to read passphrase from, if not specified the
|
||||
passphrase will be read from the terminal.
|
||||
.El
|
||||
|
@@ -39,23 +39,23 @@
|
||||
.Nd map a password into a key
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl 5 | Fl -version5
|
||||
.Op Fl 4 | Fl -version4
|
||||
.Op Fl a | Fl -afs
|
||||
.Op Fl 5 | Fl Fl version5
|
||||
.Op Fl 4 | Fl Fl version4
|
||||
.Op Fl a | Fl Fl afs
|
||||
.Oo Fl c Ar cell \*(Ba Xo
|
||||
.Fl -cell= Ns Ar cell
|
||||
.Fl Fl cell= Ns Ar cell
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl w Ar password \*(Ba Xo
|
||||
.Fl -password= Ns Ar password
|
||||
.Fl Fl password= Ns Ar password
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl p Ar principal \*(Ba Xo
|
||||
.Fl -principal= Ns Ar principal
|
||||
.Fl Fl principal= Ns Ar principal
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl k Ar string \*(Ba Xo
|
||||
.Fl -keytype= Ns Ar string
|
||||
.Fl Fl keytype= Ns Ar string
|
||||
.Xc
|
||||
.Oc
|
||||
.Ar password
|
||||
@@ -65,21 +65,21 @@ performs the string-to-key function.
|
||||
This is useful when you want to handle the raw key instead of the password.
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl 5 , Fl -version5
|
||||
.It Fl 5 , Fl Fl version5
|
||||
Output Kerberos v5 string-to-key
|
||||
.It Fl 4 , Fl -version4
|
||||
.It Fl 4 , Fl Fl version4
|
||||
Output Kerberos v4 string-to-key
|
||||
.It Fl a , Fl -afs
|
||||
.It Fl a , Fl Fl afs
|
||||
Output AFS string-to-key
|
||||
.It Fl c Ar cell , Fl -cell= Ns Ar cell
|
||||
.It Fl c Ar cell , Fl Fl cell= Ns Ar cell
|
||||
AFS cell to use
|
||||
.It Fl w Ar password , Fl -password= Ns Ar password
|
||||
.It Fl w Ar password , Fl Fl password= Ns Ar password
|
||||
Password to use
|
||||
.It Fl p Ar principal , Fl -principal= Ns Ar principal
|
||||
.It Fl p Ar principal , Fl Fl principal= Ns Ar principal
|
||||
Kerberos v5 principal to use
|
||||
.It Fl k Ar string , Fl -keytype= Ns Ar string
|
||||
.It Fl k Ar string , Fl Fl keytype= Ns Ar string
|
||||
Keytype
|
||||
.It Fl -version
|
||||
.It Fl Fl version
|
||||
print version
|
||||
.It Fl -help
|
||||
.It Fl Fl help
|
||||
.El
|
||||
|
Reference in New Issue
Block a user