HPROP(8)

💖 HPROP 💖

okay bestie, welcome to hprop from section 8 of the System Manager's Manual — it's the little tool that yeets your KDC database at other machines and honestly? she eats. 💅

🌸 NAME 🌸

hprop — propagate the KDC database ✨

🎀 SYNOPSIS 🎀

hprop [-m file | --master-key=file] [-d file | --database=file]
      [--source=heimdal|mit-dump] [-r string | --v4-realm=string] [-c
      cell | --cell=cell] [-k keytab | --keytab=keytab] [-R string |
      --v5-realm=string] [-D | --decrypt] [-E | --encrypt]
      [-n | --stdout] [-v | --verbose] [--version] [-h | --help]
      [host[:port]] ...

✨ DESCRIPTION ✨

so like, hprop takes a principal database in a format you specify and converts it into a stream of Heimdal database records. that stream can go two places: straight out to standard out, or — and this is the main character move — get propagated to an hpropd(8) server running on a different machine. 🦋

if you're propagating, she connects to all the hosts you listed on the command line by opening a TCP connection to port 754 (that's the service hprop) and sends the database in encrypted form. no cap, it's encrypted.

here's what she supports:

🌈 supported options 🌈

• -m file, --master-key=file — where to find the master key, the one used to encrypt or decrypt keys with. 🔑
• -d file, --database=file — the database that's getting propagated, periodt.
• --source=heimdal|mit-dump|krb4-dump|kaserver — tells her what kind of source database you're handing over. the alternatives include:
  • heimdal — a Heimdal database
  • mit-dump — a MIT Kerberos 5 dump file
• -r string, --v4-realm=string — this one's in the synopsis, bestie, but the page never spells out what it does 💀 so I'm not gonna make anything up about it.
• -c cell, --cell=cell — same situation as -r, ngl: it's listed up in the synopsis, and that's all the page gives us. 🙈
• -k keytab, --keytab=keytab — the keytab to use for fetching the key that authenticates you to the propagation daemon(s). she uses the key hprop/hostname out of this keytab. the default is to fetch the key from the KDC database instead.
• -R string, --v5-realm=string — local realm override. your realm, your rules. 👑
• -D, --decrypt — the encryption keys in the database can be either in clear or encrypted with a master key. this option transmits the database with unencrypted keys.
• -E, --encrypt — this one transmits the database with encrypted keys. and heads up: this is the default if you don't supply any option. 💖
• -n, --stdout — dump the database on stdout, in a format that can be fed straight to hpropd. cute and pipeable. 🎀
• -v, --verbose — listed in the synopsis, no description on the page. fr fr, that's all we got.
• --version — also synopsis-only, no description given.
• -h, --help — you guessed it: synopsis-only, the page doesn't describe it.
• [host[:port]] ... — one or more hosts to propagate to, optionally with a port. you can list as many as you want, hence the .... ✨

🍓 EXAMPLES 🍓

the following will propagate a database to another machine (which should be running hpropd(8)):

$ hprop slave-1 slave-2

🦋 SEE ALSO 🦋

• hpropd(8)

and that's the whole vibe, bestie 🫶 this one's from HEIMDAL, dated December 8, 2004 — iconic behaviour, honestly, still serving after all these years. 💜✨