NAME

      ktcheck - verify and download command file and transcripts

SYNOPSIS

      ktcheck  [-inrV]  [  -q | -v  ]  [  -c checksum ] [ -K command-file ] [
      -h host ] [ -p port ] [ -w auth-level ] [ -x ca-pem-file ]  [  -y cert-
      pem-file ] [ -z private-key-file ]


DESCRIPTION

      ktcheck  verifies a client's command file with the radmind server host.
      The command file is downloaded from host if it is missing  or  has  the
      wrong  size.   With  the  -c  option, checksums are also used to verify
      files.
      Reading the command file line-by-line, ktcheck  verifies  each  command
      file  and  transcript listed, downloading it from host if it is missing
      or out of date.  ktcheck ignores blank lines and comments ( lines start-
      ing with '#' ).  Included command files are read are verified using the
      same method.
      Each special file listed in the command file is converted into a  tran-
      script  line  in special.T with information provided by host.  See rad-
      mind(8) for details of the STAT command.
      If checksumming is turned on, the special transcript is  verified  using
      the  checksum  and  file  size.  If either are wrong, the special tran-
      script is updated.  If checksumming is turned  off,  the  special  tran-
      script is always updated.
      Files  updated  by ktcheck must be regular files and the user must have
      access to modify them.
      When run with the -n option, ktcheck verifies but never  downloads  the
      command files or transcripts.  A tempory special.T is created for veri-
      fication and is removed on exit.


OPTIONS

      -c checksum        enables checksumming.
      -i                 force output line buffering.
      -h host            specifies the radmind server, by default radmind.
      -K command         specifies  a  command  file,  by  default  /var/rad-
                         mind/client/command.K.
      -n                 no files modified.
      -p port            specifies a port, by default 6662.
      -q                 suppress all messages.
      -r                 use  random  seed file $RANDFILE if that environment
                         variable  is   set,   $HOME/.rnd   otherwise.    See
                         RAND_load_file(3o).
      -V                 displays  the  version  of  ktcheck, a list  of sup-
                         ported checksumming algorithms in  descending  order
                         of preference and then exits.
      -v                 displays communication with the radmind server.
      -w auth-level      TLS  authorization level, by default 0.  0 = no TLS,
                         1 = server verification, 2 = server and client veri-
                         fication.
      -x ca-pem-file     Certificate   authority's   public  certificate,  by
                         default /var/radmind/cert/ca.pem.
      -y cert-pem-file   Client's public certificate,  by  default  /var/rad-
                         mind/cert/cert.pem.
      -z private-key-file
                         Client's   private   key,   by   default   /var/rad-
                         mind/cert/cert.pem.


FILES

      /var/radmind/client/command.K
                         name of the default command file.
      special.T          name of the special transcript.


EXIT STATUS

      The following exit values are returned:
      0    No differences were found.
      1    Differences were found.
      >1   An error occurred.


SEE ALSO

      fsdiff(1),  lapply(1),  lcksum(1),  lcreate(1),  lfdiff(1),  lmerge(1),
      twhich(1), radmind(8), RAND_load_file(3o).