Linux and Unix keylogin command

Quick links

About keylogin
Syntax
Examples
Related commands
Linux and Unix main page

About keylogin

The keylogin command prompts for a password, and uses it to decrypt the user's secret key. The key may be found in the /etc/publickey file or the NIS map ``publickey.byname'' or the NIS+ table ``cred.org_dir'' in the user's home domain.

Syntax

keylogin [-r]

-rUpdate the /etc/.rootkey file. This file holds the unencrypted secret key of the superuser. Only the superuser may use this option. It is used so that processes running as superuser can issue authenticated requests without requiring that the administrator explicitly run keylogin as superuser at system startup time. The -r option should be used by the administrator when the host's entry in the publickey database has changed, and the /etc/.rootkey file has become out-of-date with respect to the actual key pair stored in the publickey database. The permissions on the /etc/.rootkey file are such that it may be read and written by the superuser but by no other user on the system. 

If multiple authentication mechanisms are configured for the system, each of the configured mechanism's secret keys will be stored in the /etc/.rootkey file.

Related commands

login