.\" $Id: hprop.8,v 1.3 1997/09/03 20:33:04 joda Exp $
.\"
.Dd September 3, 1997
.Dt HPROP 8
.Os HEIMDAL
.Sh NAME
.Nm hprop
.Nd
propagate the KDC database
.Sh SYNOPSIS
.Nm
.Op Fl 4DEhnv
.Op Fl d Ar file
.Op Fl -database= Ns Ar file
.Op Fl -decrypt
.Op Fl -encrypt
.Op Fl -help
.Op Fl k
.Op Fl -keytab= Ns Ar file
.Op Fl m Ar file
.Op Fl -master-key= Ns Ar file
.Op Fl -stdout
.Op Fl -v4-db
.Op Fl -verbose
.Op Fl -version
.Ar host ...
.Sh DESCRIPTION
.Nm
propagates the database from a master KDC to a slave. It connects to
all
.Ar hosts
specified on the command by opening a TCP connection to port 754
(service hprop) and sends the database in encrypted form.
.Pp
Options supported:
.Bl -tag -width Ds
.It Fl d Ar file
.It Fl -database= Ns Ar file
The database to be propagated.
.It Fl D
.It Fl -decrypt
The encryption keys in the database can either be in clear, or
encrypted with a master key. This option thansmits the database with
unencrypted keys.
.It Fl E
.It Fl -encrypt
This option thansmits the database with encrypted keys.
.It Fl k
.It Fl -keytab= Ns Ar file
The keytab to use for fetching the key to be used for authenticating
to the propagation daemon(s). The key
.Pa kadmin/hprop
is used from this keytab.
.It Fl m Ar file
.It Fl -master-key= Ns Ar file
Where to find the master key to encrypt or decrypt keys with.
.It Fl n
.It Fl -stdout
Dump the database on stdout, in a format that can be fed to hpropd.
.It Fl 4
.It Fl -v4-db
Use a version 4 database. This option is only available if the code is
compiled with Kerberos 4 support.
.El
.Sh SEE ALSO
.Xr hpropd 8