1COROSYNC-KEYGEN(8)          System Manager's Manual         COROSYNC-KEYGEN(8)
2
3
4

NAME

6       corosync-keygen - Generate an authentication key for Corosync.
7

SYNOPSIS

9       corosync-keygen
10

DESCRIPTION

12       If  you  want  to configure corosync to use cryptographic techniques to
13       ensure authenticity
14       and privacy of the messages, you will need to generate a private key.
15
16       corosync-keygen    creates    this    key    and    writes    it     to
17       /etc/corosync/authkey.
18
19       This  private key must be copied to every processor in the cluster.  If
20       the
21       private key isn't the same for every node, those nodes with nonmatching
22       private
23       keys will not be able to join the same configuration.
24
25       Copy  the  key  to  some  security  transportable storage or use ssh to
26       transmit the
27       key from node to node.  Then install the key with the command:
28
29       unix#:     install     -D     --group=0      --owner=0      --mode=0400
30       /path_to_authkey/authkey /etc/corosync/authkey
31
32       If  a message "Invalid digest" appears from the corosync executive, the
33       keys
34       are not consistent between processors.
35
36       Note: corosync-keygen will ask for user input to assist  in  generating
37       entropy.
38

EXAMPLES

40       Generate the key.
41
42       $ corosync-keygen
43       Corosync Cluster Engine Authentication key generator.
44       Gathering 1024 bits for key from /dev/random.
45       Press keys on your keyboard to generate entropy.
46

SEE ALSO

48       corosync_overview(8), corosync.conf(5),
49

AUTHOR

51       Angus Salkeld
52
53                                  2010-05-30                COROSYNC-KEYGEN(8)