Path: utzoo!attcan!uunet!tut.cis.ohio-state.edu!ucbvax!agate!shelby!IAG.HP.COM!tai
From: tai@IAG.HP.COM (Tai Jin)
Newsgroups: comp.protocols.kerberos
Subject: Re: kprop and kpropd
Message-ID: <9001130136.AA03108@kenzo.iag.hp.com>
Date: 13 Jan 90 01:36:03 GMT
References: <520.632168517@doc.ic.ac.uk>
Sender: daemon@shelby.Stanford.EDU
Organization: The Internet
Lines: 29

Here's the script I use to propagate the database.  Make sure kpropd
is running on all your slave servers (and make sure that kdb_util can
be found in PATH since kpropd execs kdb_util).

#!/bin/ksh
# Install this script in /kerberos on the Kerberos master server
# Propagate the database to slave servers
# kpropd (the receiving end) expects to hear from rcmd.KRB_MASTER

KDB_UTIL=/usr/local/etc/kdb_util
KPROP=/usr/local/etc/kprop
SLAVES=/kerberos/slaves			# list of slave servers
SLAVEFILE=/kerberos/slavefile
KSRVTGT=/usr/local/etc/ksrvtgt
KDESTROY=/usr/local/bin/kdestroy
MASTER=`/bin/hostname`
MASTER=${MASTER%%.*}			# remove domain part
export KRBTKFILE=/tmp/tkt_rcmd.$MASTER

if [ -d /kerberos -a -r /kerberos/slaves ]
then
	cd /kerberos
	$KDB_UTIL slave_dump $SLAVEFILE
	echo "Getting temporary ticket for slave propagation..."
	$KSRVTGT rcmd $MASTER
	$KPROP $SLAVEFILE $SLAVES
	echo "Temporary \c"
	$KDESTROY
fi