Subversion Repositories planix.SVN

Rev

Details | Last modification | View Log | RSS feed

Rev Author Line No. Line
2 - 1 
.TH SECSTORE 8
2 
.SH NAME
3 
secstored, secuser \- secstore commands
4 
.SH SYNOPSIS
5 
.br
6 
.B auth/secstored
7 
.RB [ -R ]
8 
[
9 
.BI -S " servername"
10 
] [
11 
.BI -s " address"
12 
] [
13 
.BI -x " network"
14 
] [
15 
.B -v
16 
]
17 
.PP
18 
.B auth/secuser
19 
[
20 
.B -v
21 
]
22 
.I username
23 
.SH DESCRIPTION
24 
.I Secstored
25 
serves requests from
26 
.IR secstore (1).
27 
By default it listens on port
28 
.BR tcp!*!5356 ;
29 
the
30 
.B -s
31 
option specifies an alternative
32 
.IR address .
33 
In the connection protocol,
34 
.I secstored
35 
describes itself as service
36 
.BR secstore ,
37 
but the
38 
.B -S
39 
option can specify a different
40 
.IR servername .
41 
The
42 
.B -R
43 
option supplements the password check with a
44 
call to a RADIUS server, for checking hardware
45 
tokens or other validation.
46 
The
47 
.B -x
48 
option specifies an alternative
49 
.I network
50 
to the default
51 
.BR /net .
52 
By default,
53 
.I secstored
54 
puts itself into the background;
55 
the
56 
.B -v
57 
option enables a verbose debugging mode that suppresses that.
58 
.PP
59 
.I Secuser
60 
is an administrative command that runs on the
61 
secstore machine, normally the authserver,
62 
to create new accounts and
63 
to change status on existing accounts.
64 
It prompts for account information such as
65 
password and expiration date, writing to
66 
.BI /adm/secstore/who/ user
67 
for a given secstore
68 
.IR user .
69 
The directory
70 
.B /adm/secstore
71 
should be created mode 770 with owner or group allowing access to the user
72 
that runs
73 
.IR secstored .
74 
The
75 
.B -v
76 
option makes the command chattier.
77 
.PP
78 
By default,
79 
.I secstored
80 
warns the client if no account exists.
81 
If you prefer to obscure this information, use
82 
.I secuser
83 
to create an account
84 
.BR FICTITIOUS .
85 
.SH FILES
86 
.TF /adm/secstore/store/user/
87 
.TP
88 
.BI /adm/secstore/who/ user
89 
.I secstore
90 
account name, expiration date, verifier
91 
.TP
92 
.BI /adm/secstore/store/ user /
93 
.I user 's
94 
file storage
95 
.TP
96 
.B /lib/ndb/auth
97 
for mapping local userid to RADIUS userid
98 
.TP
99 
.B /sys/log/secstore
100 
log file (if it does not exist,
101 
.I secstored
102 
logs to
103 
.BR /dev/cons )
104 
.SH SOURCE
105 
.B /sys/src/cmd/auth/secstore
106 
.SH SEE ALSO
107 
.IR secstore (1)