chkey(1)

NAME

chkey − change user’s encryption key used in secure RPC

SYNOPSIS

chkey [ −f ] [ −s nisplus | nis | files ]

AVAILABILITY

SUNWcsu

DESCRIPTION

chkey is used to change a user’s secure RPC public key and secret key pair. chkey prompts for a password and uses it to encrypt the user’s private Diffie-Hellman (192 bit) cryptographic key. The key pair can be stored in the /etc/publickey file, (see publickey(4)), NIS publickey map or NIS+ cred.org_dir table. If a new private key is generated, it will be registered with the local keyserv(1M) daemon.

If the user already has a public key/secret key pair stored with the naming service, the user should have already done a keylogin(1). If user’s login password and the secret key password are the same, login(1) automatically runs keylogin(1) for the user, otherwise the user is required to run keylogin(1) before chkey(1) will succeed.

If the secret key password is different than the login password, chkey will complain and exit. The −f option forces chkey to accept the new password, even if it differs from the login password.

If the source of the publickey is not specified with the −s option, chkey consults the publickey entry in the name service switch configuration file (see nsswitch.conf(4)). If the publickey entry specifies one and only one source, then chkey will change the key in the specified name service. However, if multiple name services are listed, chkey can not decide which source to update and will display an error message. The user should specify the source explicilty with the −s option.

OPTIONS

−f Force chkey to accept the new password. The option is required if the login password is different from the secret key password.

−s nisplus

−s nis

−s files Update the database in the specified source: nisplus (for NIS+), nis (for NIS), or files. Other sources may be available in the future.

FILES

/etc/nsswitch.conf

/etc/publickey

Museum

Related Articles