shishid(1)

Shishi KDC server

Section 1 shishi-kdc bookworm source

Description

SHISHID

NAME

shishid - Shishi KDC server

SYNOPSIS

shishid [OPTION]...

DESCRIPTION

Shishi Key Distribution Center server.
-h, --help

Print help and exit

-V, --version

Print version and exit

Commands:

-l, --listen=[FAMILY:]ADDR:PORT/TYPE

Sockets to listen for queries on. Family is

‘IPv4’ or ‘IPv6’, if absent the family is

decided by gethostbyname(ADDR). An address of ‘*’ indicates all addresses on the local host. The default is ‘*:kerberos/udp, *:kerberos/tcp’.

-u, --setuid=NAME

After binding socket, set user identity.

TLS settings:

--no-tls

Disable TLS support (default=off)

--x509cafile=FILE

X.509 certificate authorities used to verify client certificates, in PEM format.

--x509certfile=FILE

X.509 server certificate, in PEM format.

--x509crlfile=FILE

X.509 certificate revocation list to check for revoked client certificates, in PEM format.

--x509keyfile=FILE

X.509 server certificate key, in PEM format.

--resume-limit=SHORT

Keep track of up to this many TLS sessions for resume purposes (0 to disable TLS resume). (default=‘50’)

Other options:

-c, --configuration-file=FILE Use specified configuration file.

-v, --verbose

Produce verbose output. Use multiple times to increase amount of information.

-q, --quiet

Don’t produce any diagnostic output. (default=off)

Mandatory arguments to long options are mandatory for short options too.

AUTHOR

Written by Simon Josefsson.

REPORTING BUGS

Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

Copyright © 2022 Simon Josefsson. License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.