The chkey command changes a user's secure RPC public key and secret key pair. chkey prompts for the old secure-rpc password and verifies that it is correct by decrypting the secret key. If the user has not already used keylogin to decrypt and store the secret key with keyserv, chkey registers the secret key with the local keyserv daemon. If the secure-rpc password does not match the login password, chkey prompts for the login password. chkey then uses the login password to encrypt the user's secret Diffie-Hellman (192 bit) cryptographic key. chkey can also encrypt other Diffie-Hellman keys for authentication mechanisms configured using nisauthconf.
chkey ensures that the login password and the secure-rpc password (or passwords) are kept the same, thus enabling password shadowing.
The key pair can be stored in the /etc/publickey file, the NIS publickey map, or the NIS+ cred.org_dir table. If a new secret key is generated, it will be registered with the local keyserv daemon. However, only NIS+ can store Diffie-Hellman keys other than 192-bits.
Keys for specific mechanisms can be changed or reencrypted using the -m option followed by the authentication mechanism name. Multiple -m options can be used to change one or more keys. However, only mechanisms configured using nisauthconf can be changed with chkey.
If the source of the publickey is not specified with the -s option, chkey consults the publickey entry in the name service switch configuration file (nsswitch.conf). If the publickey entry specifies one and only one source, then chkey will change the key in the specified name service. However, if multiple name services are listed, chkey can not decide which source to update and displays an error message. The user should specify the source explicitly with the -s option.
Non-root users are not allowed to change their key pair in the files database.
查看英文版
查看中文版
chkey 語(yǔ)法
chkey [-p] [-s nisplus | nis | files | ldap] [-m]
選件
-p
使用用戶的登錄密碼重新加密現(xiàn)有的密鑰。
-s nisplus
更新NIS + 數(shù)據(jù)庫(kù)。
-s nis
更新NIS數(shù)據(jù)庫(kù)。
-s ldap
更新LDAP數(shù)據(jù)庫(kù)。
-s files
更新文件數(shù)據(jù)庫(kù)。
-m
更改或重新加密指定機(jī)制的秘密密鑰。
chkey [-p] [-s nisplus | nis | files | ldap] [-m]
Options
-p
Re-encrypt the existing secret key with the user's login password.
-s nisplus
Update the NIS+ database.
-s nis
Update the NIS database.
-s ldap
Update the LDAP database.
-s files
Update the files database.
-m
Changes or re-encrypts the secret key for the specified mechanism.
chkey (更改用戶的安全RPC密鑰對(duì))
在SunOS上，chkey命令更改用戶的安全RPC密鑰對(duì)。
On SunOS, the chkey command changes a user's secure RPC key pair.
查看英文版
查看中文版
1 chkey 運(yùn)行系統(tǒng)環(huán)境
2 chkey 說(shuō)明
3 chkey 語(yǔ)法
chkey 運(yùn)行系統(tǒng)環(huán)境
Linux
chkey 說(shuō)明
該chkey會(huì)命令更改用戶的安全RPC公鑰和密鑰對(duì)。chkey提示輸入舊的secure-rpc密碼，并通過(guò)解密密鑰來(lái)驗(yàn)證它是否正確。如果用戶尚未使用keylogin解密和使用keyserv存儲(chǔ)密鑰，則chkey將密鑰注冊(cè)到本地keyserv 守護(hù)進(jìn)程。如果secure-rpc密碼與登錄密碼不匹配，則chkey提示輸入登錄密碼。然后chkey使用登錄密碼來(lái)加密用戶的Diffie -Hellman 秘密密鑰（192位）。chkey還可為使用nisauthconf配置的身份驗(yàn)證機(jī)制加密其他Diffie-Hellman密鑰。
chkey確保登錄密碼和secure-rpc密碼（或多個(gè)密碼）保持相同，從而啟用密碼屏蔽。
密鑰對(duì)可以存儲(chǔ)在/ etc / publickey文件，NIS公共密鑰映射或NIS + cred.org_dir表中。如果生成了新的密鑰，它將在本地keyserv守護(hù)程序中注冊(cè)。但是，只有NIS +可以存儲(chǔ)192位以外的Diffie-Hellman密鑰。
可以使用-m選項(xiàng)和認(rèn)證機(jī)制名稱來(lái)更改或重新加密特定機(jī)制的密鑰。多個(gè)-m選項(xiàng)可用于更改一個(gè)或多個(gè)鍵。但是，只能使用chkey更改使用nisauthconf配置的機(jī)制。
如果未使用-s選項(xiàng)指定公共密鑰的源，則chkey會(huì)查詢名稱服務(wù)交換機(jī)配置文件（nsswitch.conf）中的公共密鑰條目。如果publickey條目?jī)H指定一個(gè)來(lái)源，則chkey將更改指定名稱服務(wù)中的密鑰。但是，如果列出了多個(gè)名稱服務(wù)，則chkey無(wú)法確定要更新的源并顯示錯(cuò)誤消息。用戶應(yīng)使用-s選項(xiàng)顯式指定源。
非root用戶不允許在文件數(shù)據(jù)庫(kù)中更改其密鑰對(duì)。
The chkey command changes a user's secure RPC public key and secret key pair. chkey prompts for the old secure-rpc password and verifies that it is correct by decrypting the secret key. If the user has not already used keylogin to decrypt and store the secret key with keyserv, chkey registers the secret key with the local keyserv daemon. If the secure-rpc password does not match the login password, chkey prompts for the login password. chkey then uses the login password to encrypt the user's secret Diffie-Hellman (192 bit) cryptographic key. chkey can also encrypt other Diffie-Hellman keys for authentication mechanisms configured using nisauthconf.
chkey ensures that the login password and the secure-rpc password (or passwords) are kept the same, thus enabling password shadowing.
The key pair can be stored in the /etc/publickey file, the NIS publickey map, or the NIS+ cred.org_dir table. If a new secret key is generated, it will be registered with the local keyserv daemon. However, only NIS+ can store Diffie-Hellman keys other than 192-bits.
Keys for specific mechanisms can be changed or reencrypted using the -m option followed by the authentication mechanism name. Multiple -m options can be used to change one or more keys. However, only mechanisms configured using nisauthconf can be changed with chkey.
If the source of the publickey is not specified with the -s option, chkey consults the publickey entry in the name service switch configuration file (nsswitch.conf). If the publickey entry specifies one and only one source, then chkey will change the key in the specified name service. However, if multiple name services are listed, chkey can not decide which source to update and displays an error message. The user should specify the source explicitly with the -s option.
Non-root users are not allowed to change their key pair in the files database.
查看英文版
查看中文版
chkey 語(yǔ)法
選件
-p
使用用戶的登錄密碼重新加密現(xiàn)有的密鑰。
-s nisplus
更新NIS + 數(shù)據(jù)庫(kù)。
-s nis
更新NIS數(shù)據(jù)庫(kù)。
-s ldap
更新LDAP數(shù)據(jù)庫(kù)。
-s files
更新文件數(shù)據(jù)庫(kù)。
-m
更改或重新加密指定機(jī)制的秘密密鑰。
Options
-p
Re-encrypt the existing secret key with the user's login password.
-s nisplus
Update the NIS+ database.
-s nis
Update the NIS database.
-s ldap
Update the LDAP database.
-s files
Update the files database.
-m
Changes or re-encrypts the secret key for the specified mechanism.
查看英文版
查看中文版
其他命令行
cut | cu | csplit | crontab | cpio | continue | compress | col | cmp | cksum | chsh | chroot | cd | chmod | cp | comm | chown | cal | calendar | clear | chfn | cancel | cat | cc | cfdisk | checkeq | checknr | chgrp |