4.7 Parameters for shishid

If no parameters are specified, `shishid' listens on the defaults interfaces and answers incoming requests using the keys in the default key file.

Mandatory arguments to long options are mandatory for short options too.

     Usage: shishid [OPTIONS]...
     
       -h, --help                            Print help and exit
       -V, --version                         Print version and exit
     
     Commands:
       -l, --listen=[FAMILY:]ADDR:PORT/TYPE  Sockets to listen for queries on.
                                               Family is `IPv4' or `IPv6', if
                                               absent the family is decided by
                                               gethostbyname(ADDR). An address of
                                               `*' indicates all addresses on the
                                               local host. The default is
                                               `IPv4:*:kerberos/udp,
                                               IPv4:*:kerberos/tcp,
                                               IPv6:*:kerberos/udp,
                                               IPv6:*:kerberos/tcp'.
       -u, --setuid=NAME                     After binding socket, set user
                                               identity.
     
     TLS settings:
           --x509cafile=FILE                 X.509 certificate authorities used to
                                               verify client certificates, in PEM
                                               format.
           --x509certfile=FILE               X.509 server certificate, in PEM
                                               format.
           --x509crlfile=FILE                X.509 certificate revocation list to
                                               check for revoked client
                                               certificates, in PEM format.
           --x509keyfile=FILE                X.509 server certificate key, in PEM
                                               format.
            --resume-limit=SHORT             Keep track of up to this many TLS
                                              sessions for resume purposes (0 to
                                              disable TLS resume).  (default=`50')
     
     Other options:
       -c, --configuration-file=FILE         Use specified configuration file.
       -v, --verbose                         Produce verbose output.
                                                 (default=off)
       -q, --quiet                           Don't produce any diagnostic output.
                                                 (default=off)