/mandos/release : revision 237.7.156

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2012-06-22 23:33:56 UTC
mto: (237.7.272 trunk)
mto: This revision was merged to the branch mainline in revision 303.
Revision ID: teddy@recompile.se-20120622233356-odoqqt2ki2gssn37

* Makefile (check): Also check mandos-ctl.
* mandos-ctl: All options taking a time interval argument can now take
              an RFC 3339 duration.
  (rfc3339_duration_to_delta): New function.
  (string_to_delta): Try rfc3339_duration_to_delta first.
  (main): New "--check" option.
* mandos-ctl.xml (SYNOPSIS, OPTIONS): Document new "--check" option.

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2012-01-01">

<!ENTITY TIMESTAMP "2012-05-27">

<!ENTITY % common SYSTEM "common.ent">

%common;

><refentrytitle>mandos</refentrytitle>

<manvolnum>8</manvolnum></citerefentry>, read by it at startup.

The file needs to list all clients that should be able to use

the service. All clients listed will be regarded as enabled,

even if a client was disabled in a previous run of the server.

the service. The settings in this file can be overridden by

runtime changes to the server, which it saves across restarts.

(See the section called <quote>PERSISTENT STATE</quote> in

<citerefentry><refentrytitle>mandos</refentrytitle><manvolnum

>8</manvolnum></citerefentry>.) However, any <emphasis

>changes</emphasis> to this file (including adding and removing

clients) will, at startup, override changes done during runtime.

</para>

<para>

The format starts with a <literal>[<replaceable>section

162

167

This option is <emphasis>optional</emphasis>.

163

168

</para>

164

169

<para>

165

This option allows you to override the default shell

166

command that the server will use to check if the client is

167

still up. Any output of the command will be ignored, only

168

the exit code is checked: If the exit code of the command

169

is zero, the client is considered up. The command will be

170

run using <quote><command><filename>/bin/sh</filename>

170

This option overrides the default shell command that the

171

server will use to check if the client is still up. Any

172

output of the command will be ignored, only the exit code

173

is checked: If the exit code of the command is zero, the

174

client is considered up. The command will be run using

175

171

176

<option>-c</option></command></quote>, so

172

177

<varname>PATH</varname> will be searched. The default

173

178

value for the checker command is <quote><literal

404

409

<quote><literal>approval_duration</literal></quote>,

405

410

<quote><literal>created</literal></quote>,

406

411

<quote><literal>enabled</literal></quote>,

412

<quote><literal>expires</literal></quote>,

407

413

<quote><literal>fingerprint</literal></quote>,

408

414

<quote><literal>host</literal></quote>,

409

415

<quote><literal>interval</literal></quote>,

506

512

<citerefentry><refentrytitle>mandos.conf</refentrytitle>

507

513

<manvolnum>5</manvolnum></citerefentry>,

508

514

<citerefentry><refentrytitle>mandos</refentrytitle>

515

<manvolnum>8</manvolnum></citerefentry>,

516

<citerefentry><refentrytitle>fping</refentrytitle>

509

517

510

518

</para>

511

519

</refsect1>

Older »