SHISHID(8)

📦 version 1.0.3, in ubuntu stonking

💖 SHISHID(8) 💖

okay bestie, gather round, because today we're talking about a little server from the System Administration Utilities corner of the GNU Shishi universe, and honestly? it's giving main character energy for your whole Kerberos setup. 🎀

✨ NAME ✨

shishid — the Shishi KDC server. that's Key Distribution Center, and yes it is exactly as important as it sounds. 👑

🌸 SYNOPSIS 🌸

shishid [OPTION]...

like, you just run it with options. that's the whole vibe. 🦋

💅 DESCRIPTION 💅

so shishid is the Shishi Key Distribution Center server. it's the one holding the keys, literally. no cap. 🔑

Now here's the little starter menu of options that show up before the fancy grouped sections:

  • -h, --help — prints help and then dips. bye! 👋
  • -V, --version — prints the version and exits. iconic behavior.

🧚 Commands:

  • -l, --listen=[FAMILY:]ADDR:PORT/TYPE — the sockets it listens on for queries. the family can be IPv4 or IPv6, and if you don't say which, the family gets decided by gethostbyname(ADDR). if you hand it an address of *, that means all addresses on the local host. the default is *:kerberos/udp, *:kerberos/tcp. 🫶
  • -u, --setuid=NAME — after the socket is bound, it sets the user identity. so it drops privileges after it's already comfy. 💅

🔐 TLS settings:

  • --no-tls — disables TLS support. (default=off) like, by default TLS is on, so this is the "please don't" switch. 🙈
  • --x509cafile=FILE — the X.509 certificate authorities used to verify client certificates, in PEM format. this is how you check who's knocking. 🚪
  • --x509certfile=FILE — the X.509 server certificate, in PEM format. it's YOUR personal certificate. serve. ✨
  • --x509crlfile=FILE — the X.509 certificate revocation list to check for revoked client certificates, in PEM format. the naughty list, essentially. 💀
  • --x509keyfile=FILE — the X.509 server certificate key, in PEM format. guard this one with your life, bestie. 🔥
  • --resume-limit=SHORT — keeps track of up to this many TLS sessions for resume purposes. 0 disables TLS resume. (default=50) 🌈

⭐ Other options:

  • -c, --configuration-file=FILE — use the specified configuration file. 🎀
  • -v, --verbose — produces verbose output. use it multiple times to increase the amount of information. stack it, honestly. 📚
  • -q, --quiet — doesn't produce any diagnostic output. (default=off) silence, but make it fashion. 🤫
⚠️ Mandatory arguments to long options are mandatory for short options too. so like, don't forget your arguments, fr fr.

👑 AUTHOR 👑

Written by Simon Josefsson. a legend, periodt. ✨

😭 REPORTING BUGS 😭

Report bugs to <bug-shishi@gnu.org>. they wanna hear it, bestie. 🫶

Packaged by Debian (1.0.3-7)

Copyright © 2022 Simon Josefsson.

License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.

This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

💀 no warranty, girly. read that part twice.

🦋 SEE ALSO 🦋

the full documentation for shishid is maintained as a Texinfo manual. if the info and shishid programs are properly installed at your site, the command

info shishid

should give you access to the complete manual. iykyk. ⭐

and that's the whole page, bestie!! this was GNU Shishi 1.0.3, dated March 2026, and honestly? she ate. 🎀✨💖 mwah, go configure your KDC. 👑

📦 where this page comes from