/mandos/release : revision 237.2.143

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2009-09-21 21:39:25 UTC
mto: (24.1.144 mandos) (237.12.2 mandos-persistent) (299.1.1 release) (300.1.1 release) (301.1.1 release)
mto: This revision was merged to the branch mainline in revision 270.
Revision ID: teddy@fukt.bsnet.se-20090921213925-jbpt6tzu99otseng

Use D-Bus properties instead of our own methods.

* mandos (Client._datetime_to_milliseconds): Renamed to
                                             "_timedelta_to_milliseconds".
                                             All callers changed.
  (dbus_service_property): New decorator for D-Bus properties.
  (DBusPropertyException, DBusPropertyAccessException,
  DBusPropertyNotFound): New D-Bus exception classes.
  (DBusObjectWithProperties): New; extends "dbus.service.Object" with
                              support for properties.
  (ClientDBus): Inherit from, and call up to, "DBusObjectWithProperties".
  (ClientDBus.CheckedOK, ClientDBus.GetAllProperties,
  ClientDBus.SetChecker, ClientDBus.SetHost, ClientDBus.SetInterval,
  ClientDBus.SetSecret, ClientDBus.SetTimeout, ClientDBus.Enable,
  ClientDBus.StartChecker, ClientDBus.Disable,
  ClientDBus.StopChecker): Removed, replaced with properties.
  (ClientDBus.IsStillValid): Removed, superfluous.
  (ClientDBus.name_dbus_property,
  ClientDBus.fingerprint_dbus_property, ClientDBus.host_dbus_property,
  ClientDBus.created_dbus_property,
  ClientDBus.last_enabled_dbus_property,
  ClientDBus.enabled_dbus_property,
  ClientDBus.last_checked_ok_dbus_property,
  ClientDBus.timeout_dbus_property, ClientDBus.interval_dbus_property,
  ClientDBus.checker_dbus_property,
  ClientDBus.checker_running_dbus_property,
  ClientDBus.object_path_dbus_property,
  ClientDBus.secret_dbus_property): New D-Bus properties.

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2010-09-12">

<!ENTITY TIMESTAMP "2009-09-17">

<!ENTITY % common SYSTEM "common.ent">

%common;

><refentrytitle>mandos</refentrytitle>

<manvolnum>8</manvolnum></citerefentry>, read by it at startup.

The file needs to list all clients that should be able to use

the service. All clients listed will be regarded as enabled,

even if a client was disabled in a previous run of the server.

the service. All clients listed will be regarded as valid, even

if a client was declared invalid in a previous run of the

server.

</para>

<para>

The format starts with a <literal>[<replaceable>section

109

110

<para>

110

111

The timeout is how long the server will wait (for either a

111

112

successful checker run or a client receiving its secret)

112

until a client is disabled and not allowed to get the data

113

this server holds. By default Mandos will use 1 hour.

113

until a client is considered invalid - that is, ineligible

114

to get the data this server holds. By default Mandos will

115

use 1 hour.

114

116

</para>

115

117

<para>

116

118

The <replaceable>TIME</replaceable> is specified as a

141

143

not be started if an old one is still running. The server

142

144

will wait for a checker to complete until the above

143

145

<quote><varname>timeout</varname></quote> occurs, at which

144

time the client will be disabled, and any running checker

145

killed. The default interval is 5 minutes.

146

time the client will be marked invalid, and any running

147

checker killed. The default interval is 5 minutes.

146

148

</para>

147

149

<para>

148

150

The format of <replaceable>TIME</replaceable> is the same

266

268

</listitem>

267

269

</varlistentry>

268

270

269

270

<term><option>approved_by_default<literal> = </literal

271

>{ <literal >1</literal> | <literal>yes</literal> | <literal

272

>true</literal> | <literal>on</literal> | <literal

273

>0</literal> | <literal>no</literal> | <literal

274

>false</literal> | <literal>off</literal> }</option></term>

275

276

<para>

277

Whether to approve a client by default after

278

the <option>approval_delay</option>. The default

279

is <quote>True</quote>.

280

</para>

281

</listitem>

282

</varlistentry>

283

284

285

<term><option>approval_delay<literal> = </literal><replaceable

286

>TIME</replaceable></option></term>

287

288

<para>

289

This option is <emphasis>optional</emphasis>.

290

</para>

291

<para>

292

How long to wait for external approval before resorting to

293

use the <option>approved_by_default</option> value. The

294

default is <quote>0s</quote>, i.e. not to wait.

295

</para>

296

<para>

297

The format of <replaceable>TIME</replaceable> is the same

298

as for <varname>timeout</varname> above.

299

</para>

300

</listitem>

301

</varlistentry>

302

303

304

<term><option>approval_duration<literal> = </literal

305

><replaceable>TIME</replaceable></option></term>

306

307

<para>

308

This option is <emphasis>optional</emphasis>.

309

</para>

310

<para>

311

How long an external approval lasts. The default is 1

312

second.

313

</para>

314

<para>

315

The format of <replaceable>TIME</replaceable> is the same

316

as for <varname>timeout</varname> above.

317

</para>

318

</listitem>

319

</varlistentry>

320

321

271

</variablelist>

322

272

</refsect1>

323

273

431

381

fingerprint = 3e393aeaefb84c7e89e2f547b3a107558fca3a27

432

382

secfile = /etc/mandos/bar-secret

433

383

timeout = 15m

434

approved_by_default = False

435

approval_delay = 30s

436

384

</programlisting>

437

385

</informalexample>

438

386

</refsect1>

Older »