+++ /dev/null
-<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 4//EN">
-<HTML><HEAD>
-<TITLE>Administration Reference</TITLE>
-<!-- Begin Header Records ========================================== -->
-<!-- /tmp/idwt3672/auarf000.scr converted by idb2h R4.2 (359) ID -->
-<!-- Workbench Version (AIX) on 3 Oct 2000 at 16:18:30 -->
-<META HTTP-EQUIV="updated" CONTENT="Tue, 03 Oct 2000 16:18:29">
-<META HTTP-EQUIV="review" CONTENT="Wed, 03 Oct 2001 16:18:29">
-<META HTTP-EQUIV="expires" CONTENT="Thu, 03 Oct 2002 16:18:29">
-</HEAD><BODY>
-<!-- (C) IBM Corporation 2000. All Rights Reserved -->
-<BODY bgcolor="ffffff">
-<!-- End Header Records ============================================ -->
-<A NAME="Top_Of_Page"></A>
-<H1>Administration Reference</H1>
-<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf110.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Bot_Of_Page"><IMG SRC="../bot.gif" BORDER="0" ALT="[Bottom of Topic]"></A> <A HREF="auarf112.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
-<P>
-<H2><A NAME="HDRBOS_REMOVEKEY" HREF="auarf002.htm#ToC_125">bos removekey</A></H2>
-<A NAME="IDX4593"></A>
-<A NAME="IDX4594"></A>
-<A NAME="IDX4595"></A>
-<A NAME="IDX4596"></A>
-<A NAME="IDX4597"></A>
-<P><STRONG>Purpose</STRONG>
-<P>Removes a server encryption key from the <B>/usr/afs/etc/KeyFile</B>
-file
-<P><STRONG>Synopsis</STRONG>
-<PRE><B>bos removekey -server</B> <<VAR>machine name</VAR>> <B>-kvno</B> <<VAR>key version number</VAR>><SUP>+</SUP>
- [<B>-cell</B> <<VAR>cell name</VAR>>] [<B>-noauth</B>] [<B>-localauth</B>] [<B>-help</B>]
-
-<B>bos removek -s</B> <<VAR>machine name</VAR>> <B>-k</B> <<VAR>key version number</VAR>><SUP>+</SUP>
- [<B>-c</B> <<VAR>cell name</VAR>>] [<B>-n</B>] [<B>-l</B>] [<B>-h</B>]
-</PRE>
-<P><STRONG>Description</STRONG>
-<P>The <B>bos removekey</B> command removes each specified encryption key
-from the <B>/usr/afs/etc/KeyFile</B> file on the machine named by the
-<B>-server</B> argument. Use the <B>-kvno</B> argument to
-identify each key by its key version number; use the <B>bos
-listkeys</B> command to display the key version numbers.
-<P><STRONG>Cautions</STRONG>
-<P>Before removing a obsolete key, verify that the cell's maximum ticket
-lifetime has passed since the current key was defined using the <B>kas
-setpassword</B> and <B>bos addkey</B> commands. This ensures that
-no clients still possess tickets encrypted with the obsolete key.
-<P><STRONG>Options</STRONG>
-<DL>
-<P><DT><B><B>-server</B>
-</B><DD>Indicates the server machine on which to change the
-<B>/usr/afs/etc/KeyFile</B> file. Identify the machine by IP
-address or its host name (either fully-qualified or abbreviated
-unambiguously). For details, see the introductory reference page for
-the <B>bos</B> command suite.
-<P>In cells that run the United States edition of AFS and use the Update
-Server to distribute the contents of the <B>/usr/afs/etc</B> directory, it
-is conventional to specify only the system control machine as a value for the
-<B>-server</B> argument. In cells that run the international
-version of AFS, repeat the command for each file server machine. For
-further discussion, see the introductory reference page for the <B>bos</B>
-command suite.
-<P><DT><B><B>-kvno</B>
-</B><DD>Specifies the key version number of each key to remove.
-<P><DT><B><B>-cell</B>
-</B><DD>Names the cell in which to run the command. Do not combine this
-argument with the <B>-localauth</B> flag. For more details, see the
-introductory <B>bos</B> reference page.
-<P><DT><B><B>-noauth</B>
-</B><DD>Assigns the unprivileged identity <B>anonymous</B> to the
-issuer. Do not combine this flag with the <B>-localauth</B>
-flag. For more details, see the introductory <B>bos</B> reference
-page.
-<P><DT><B><B>-localauth</B>
-</B><DD>Constructs a server ticket using a key from the local
-<B>/usr/afs/etc/KeyFile</B> file. The <B>bos</B> command
-interpreter presents the ticket to the BOS Server during mutual
-authentication. Do not combine this flag with the <B>-cell</B> or
-<B>-noauth</B> options. For more details, see the introductory
-<B>bos</B> reference page.
-<P><DT><B>-help
-</B><DD>Prints the online help for this command. All other valid options
-are ignored.
-</DL>
-<P><STRONG>Examples</STRONG>
-<P>The following command removes the keys with key version numbers 5 and 6
-from the <B>KeyFile</B> file on the system control machine
-<B>fs1.abc.com</B>.
-<PRE> % <B>bos removekey -server fs1.abc.com -kvno 5 6</B>
-
-</PRE>
-<P><STRONG>Privilege Required</STRONG>
-<P>The issuer must be listed in the <B>/usr/afs/etc/UserList</B> file on
-the machine named by the <B>-server</B> argument, or must be logged onto a
-server machine as the local superuser <B>root</B> if the
-<B>-localauth</B> flag is included.
-<P><STRONG>Related Information</STRONG>
-<P><A HREF="auarf023.htm#HDRKEYFILE">KeyFile</A>
-<P><A HREF="auarf035.htm#HDRUSERLIST">UserList</A>
-<P><A HREF="auarf093.htm#HDRBOS_INTRO">bos</A>
-<P><A HREF="auarf095.htm#HDRBOS_ADDKEY">bos addkey</A>
-<P><A HREF="auarf107.htm#HDRBOS_LISTKEYS">bos listkeys</A>
-<P>
-<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf110.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Top_Of_Page"><IMG SRC="../top.gif" BORDER="0" ALT="[Top of Topic]"></A> <A HREF="auarf112.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
-<!-- Begin Footer Records ========================================== -->
-<P><HR><B>
-<br>© <A HREF="http://www.ibm.com/">IBM Corporation 2000.</A> All Rights Reserved
-</B>
-<!-- End Footer Records ============================================ -->
-<A NAME="Bot_Of_Page"></A>
-</BODY></HTML>
git://git.openafs.org / openafs.git / blobdiff