svn rev #25371: trunk/doc/rst_source/krb_admins/admin_commands/
tsitkova@MIT.EDU
tsitkova at MIT.EDU
Tue Oct 18 15:35:06 EDT 2011
http://src.mit.edu/fisheye/changelog/krb5/?cs=25371
Commit By: tsitkova
Log Message:
Updated kpropd option list.
Changed Files:
U trunk/doc/rst_source/krb_admins/admin_commands/kpropd.rst
Modified: trunk/doc/rst_source/krb_admins/admin_commands/kpropd.rst
===================================================================
--- trunk/doc/rst_source/krb_admins/admin_commands/kpropd.rst 2011-10-18 18:54:13 UTC (rev 25370)
+++ trunk/doc/rst_source/krb_admins/admin_commands/kpropd.rst 2011-10-18 19:35:06 UTC (rev 25371)
@@ -9,12 +9,13 @@
**kpropd**
[ **-r** *realm* ]
+ [ **-a** *acl_file* ]
[ **-f** *slave_dumpfile* ]
[ **-F** *principal_database* ]
[ **-p** *kdb5_util_prog* ]
+ [ **-P** *port* ]
[ **-d** ]
[ **-S** ]
- [ **-P** *port* ]
DESCRIPTION
-------------
@@ -22,9 +23,9 @@
The *kpropd* command runs on the slave KDC server.
It listens for update requests made by the :ref:`kprop(8)` program, and periodically requests incremental updates from the master KDC.
-When the slave receives a kprop request from the master, *kpropd* accepts the dumped KDC database and places it in a file,
+When the slave receives a *kprop* request from the master, *kpropd* accepts the dumped KDC database and places it in a file,
and then runs :ref:`kdb5_util(8)` to load the dumped database into the active database which is used by :ref:`krb5kdc(8)`.
-Thus, the master Kerberos server can use :ref:`kprop(8)` to propagate its database to the slave slavers.
+Thus, the master Kerberos server can use :ref:`kprop(8)` to propagate its database to the slave servers.
Upon a successful download of the KDC database file, the slave Kerberos server will have an up-to-date KDC database.
Normally, *kpropd* is invoked out of inetd(8). This is done by adding a line to the *inetd.conf* file which looks like this::
@@ -65,7 +66,7 @@
**-P**
Allow for an alternate port number for *kpropd* to listen on. This is only useful if the program is run in standalone mode.
- **-a**
+ **-a** *acl_file*
Allows the user to specify the path to the *kpropd.acl* file; by default the path used is /usr/local/var/krb5kdc/kpropd.acl.
FILES
@@ -73,7 +74,7 @@
*kpropd.acl*
Access file for *kpropd*; the default location is /usr/local/var/krb5kdc/kpropd.acl.
- Each entry is a line containing the principal of a host from which the local machine will allow Kerberos database propagation via :ref:`kprop(8)`.
+ Each entry is a line containing the principal of a *host* from which the local machine will allow Kerberos database propagation via :ref:`kprop(8)`.
SEE ALSO
----------
More information about the cvs-krb5
mailing list