checklocalkdc(1) [osx man page]

checkLocalKDC(1)					    BSD General Commands Manual 					  checkLocalKDC(1)

NAME

     checkLocalKDC -- checks a LocalKDC

SYNOPSIS

     checkLocalKDC

DESCRIPTION

     checkLocalKDC checks the integrity of a LocalKDC and its principals.  The script is non-destructive and can be run multiple times.

FILES

     checkLocalKDC does not own, but references the following files:

     /Library/Keychains/System.keychain
     /etc/krb5.keytab
     /var/db/krb5kdc/kdc.conf

SEE ALSO

     systemkeychain(8), certtool(1), configureLocalKDC(1), dscl(1), launchctl(1), security(1), syslog(1), kadmin(8), ktutil(8)

HISTORY

     checkLocalKDC first appeared in version 10.7 of Mac OS X.

Darwin								   June 29, 2010							    Darwin

SYSTEMKEYCHAIN(8)					    BSD System Manager's Manual 					 SYSTEMKEYCHAIN(8)

NAME

     systemkeychain -- creates system keychains and allows keychains to unlock keychains

SYNOPSIS

     systemkeychain [-fv] [-k filename] [-C] [password]
     systemkeychain [-fvc] [-k filename] [-s] [file ...]
     systemkeychain [-v] [-k filename] [-t]

DESCRIPTION

     The systemkeychain can be used to create a system keychain, make it possible for a keychain to unlock another keychain, or test unlocking a
     keychain.

     The options are as follows:

     -C      Create a keychain and establish it in the system as the primary system keychain whose unlocking is automatically handled by the sys-
	     tem. The new keychain is empty. If the optional password argument is given, the keychain can be also be unlocked with that; other-
	     wise, the keychain has no password and can only be unlocked by the system.  The optional password option is generally used for test-
	     ing purposes, and using it is not recommended.

     -s      Extract the master secret from source keychain(s) and install them in a destination keychain to allow unlocking.

     -t      Test unlocking the system keychain.

     -k systemKeychain
	     Use a keychain other than the default as the destination system keychain.

     -c      Create the target keychain if necessary.

     -f      Force creation of a system keychain or overwriting of an existing key for keychain unlocking keychain operations.

     -v      Turn on verbose mode.

     By default, systemkeychain works with the keychain file stored at /Library/Keychains/System.keychain .  Use of the -k option can specify a
     different target file.

     Use of the -s option allows keychains to be setup to unlock other keychains.  Chains of keychain unlocks can be setup in this manner to make
     a series of keychains unlock while only needing to manually unlock the first one.	This functionality can be verified with the -t (test
     unlock) option.

FILES

     /Library/Keychains/System.keychain

DIAGNOSTICS

     The systemkeychain utility exits 0 on success, and >0 if an error occurs.

HISTORY

     The systemkeychain command appeared in Mac OS 10.2.0 .

BSD
								  March 14, 2006							       BSD