/mandos/release : revision 24.1.71

1

<?xml version="1.0" encoding="UTF-8"?>

1

<?xml version='1.0' encoding='UTF-8'?>

2

<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

3

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

4

<!ENTITY VERSION "1.0">

5

<!ENTITY CONFNAME "mandos-clients.conf">

6

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

7

<!ENTITY TIMESTAMP "2008-09-04">

8

7

]>

9

8

10

9

11

10

12

<title>Mandos Manual</title>

11

<title>&CONFNAME;</title>

13

12

14

<productname>Mandos</productname>

13

<productname>&CONFNAME;</productname>

15

14

<productnumber>&VERSION;</productnumber>

16

<date>&TIMESTAMP;</date>

17

15

18

16

19

17

<firstname>Björn</firstname>

35

33

<holder>Teddy Hogeborn</holder>

36

34

<holder>Björn Påhlsson</holder>

37

35

</copyright>

38

<xi:include href="legalnotice.xml"/>

36

37

<para>

38

This manual page is free software: you can redistribute it

39

and/or modify it under the terms of the GNU General Public

40

License as published by the Free Software Foundation,

41

either version 3 of the License, or (at your option) any

42

later version.

43

</para>

44

45

<para>

46

This manual page is distributed in the hope that it will

47

be useful, but WITHOUT ANY WARRANTY; without even the

48

implied warranty of MERCHANTABILITY or FITNESS FOR A

49

PARTICULAR PURPOSE. See the GNU General Public License

50

for more details.

51

</para>

52

53

<para>

54

You should have received a copy of the GNU General Public

55

License along with this program; If not, see

56

<ulink url="http://www.gnu.org/licenses/"/>.

57

</para>

58

</legalnotice>

39

59

</refentryinfo>

40

60

41

61

51

71

</refnamediv>

52

72

53

73

54

<synopsis>&CONFPATH;</synopsis>

74

75

&CONFPATH;

76

</synopsis>

55

77

</refsynopsisdiv>

56

78

57

79

93

115

start time expansion, see <xref linkend="expansion"/>.

94

116

</para>

95

117

<para>

96

Unknown options are ignored. The used options are as follows:

118

Uknown options are ignored. The used options are as follows:

97

119

</para>

98

120

99

121

100

122

101

123

102

<term><option>timeout<literal> = </literal><replaceable

103

>TIME</replaceable></option></term>

124

<term><literal><varname>timeout</varname></literal></term>

104

125

105

<para>

106

This option is <emphasis>optional</emphasis>.

107

</para>

126

<synopsis><literal>timeout = </literal><replaceable

127

>TIME</replaceable>

128

</synopsis>

108

129

<para>

109

130

The timeout is how long the server will wait for a

110

131

successful checker run until a client is considered

128

149

</varlistentry>

129

150

130

151

131

<term><option>interval<literal> = </literal><replaceable

132

>TIME</replaceable></option></term>

152

<term><literal><varname>interval</varname></literal></term>

133

153

134

<para>

135

This option is <emphasis>optional</emphasis>.

136

</para>

154

<synopsis><literal>interval = </literal><replaceable

155

>TIME</replaceable>

156

</synopsis>

137

157

<para>

138

158

How often to run the checker to confirm that a client is

139

159

still up. <emphasis>Note:</emphasis> a new checker will

148

168

as for <varname>timeout</varname> above.

149

169

</para>

150

170

</listitem>

151

</varlistentry>

171

</varlistentry>

152

172

153

173

154

<term><option>checker<literal> = </literal><replaceable

155

>COMMAND</replaceable></option></term>

174

<term><literal>checker</literal></term>

156

175

157

<para>

158

This option is <emphasis>optional</emphasis>.

159

</para>

176

<synopsis><literal>checker = </literal><replaceable

177

>COMMAND</replaceable>

178

</synopsis>

160

179

<para>

161

180

This option allows you to override the default shell

162

181

command that the server will use to check if the client is

179

198

</varlistentry>

180

199

181

200

182

<term><option>fingerprint<literal> = </literal

183

><replaceable>HEXSTRING</replaceable></option></term>

201

<term><literal>fingerprint</literal></term>

184

202

185

<para>

186

This option is <emphasis>required</emphasis>.

187

</para>

203

<synopsis><literal>fingerprint = </literal><replaceable

204

>HEXSTRING</replaceable>

205

</synopsis>

188

206

<para>

189

207

This option sets the OpenPGP fingerprint that identifies

190

208

the public key that clients authenticate themselves with

195

213

</varlistentry>

196

214

197

215

198

<term><option>secret<literal> = </literal><replaceable

199

>BASE64_ENCODED_DATA</replaceable></option></term>

216

<term><literal>secret</literal></term>

200

217

201

<para>

202

If this option is not specified, the <option

203

>secfile</option> option is <emphasis>required</emphasis>

204

to be present.

205

</para>

218

<synopsis><literal>secret = </literal><replaceable

219

>BASE64_ENCODED_DATA</replaceable>

220

</synopsis>

206

221

<para>

207

222

If present, this option must be set to a string of

208

223

base64-encoded binary data. It will be decoded and sent

221

236

lines is that a line beginning with white space adds to

222

237

the value of the previous line, RFC 822-style.

223

238

</para>

224

</listitem>

225

</varlistentry>

226

227

228

<term><option>secfile<literal> = </literal><replaceable

229

>FILENAME</replaceable></option></term>

230

231

<para>

232

This option is only used if <option>secret</option> is not

233

specified, in which case this option is

234

<emphasis>required</emphasis>.

235

</para>

236

<para>

237

Similar to the <option>secret</option>, except the secret

238

data is in an external file. The contents of the file

239

should <emphasis>not</emphasis> be base64-encoded, but

240

will be sent to clients verbatim.

241

</para>

242

</listitem>

243

</varlistentry>

244

245

246

<term><option><literal>host = </literal><replaceable

247

>STRING</replaceable></option></term>

248

249

<para>

250

This option is <emphasis>optional</emphasis>, but highly

251

<emphasis>recommended</emphasis> unless the

252

<option>checker</option> option is modified to a

253

non-standard value without <quote>%(host)s</quote> in it.

254

</para>

239

<para>

240

If this option is not specified, the <option

241

>secfile</option> option is used instead, but one of them

242

<emphasis>must</emphasis> be present.

243

</para>

244

</listitem>

245

</varlistentry>

246

247

248

<term><literal>secfile</literal></term>

249

250

<synopsis><literal>secfile = </literal><replaceable

251

>FILENAME</replaceable>

252

</synopsis>

253

<para>

254

The same as <option>secret</option>, but the secret data

255

is in an external file. The contents of the file should

256

<emphasis>not</emphasis> be base64-encoded, but will be

257

sent to clients verbatim.

258

</para>

259

<para>

260

This option is only used, and <emphasis>must</emphasis> be

261

present, if <option>secret</option> is not specified.

262

</para>

263

</listitem>

264

</varlistentry>

265

266

267

268

269

<synopsis><literal>host = </literal><replaceable

270

>STRING</replaceable>

271

</synopsis>

255

272

<para>

256

273

Host name for this client. This is not used by the server

257

274

directly, but can be, and is by default, used by the

261

278

</varlistentry>

262

279

263

280

</variablelist>

264

</refsect1>

281

</refsect1>

265

282

266

283

267

284

<title>EXPANSION</title>

310

327

percent characters in a row (<quote>%%%%</quote>) must be

311

328

entered. Also, a bad format here will lead to an immediate

312

329

but <emphasis>silent</emphasis> run-time fatal exit; debug

313

mode is needed to expose an error of this kind.

330

mode is needed to track down an error of this kind.

314

331

</para>

315

332

</refsect2>

316

333

317

</refsect1>

334

</refsect1>

318

335

319

336

320

337

<title>FILES</title>

376

393

377

394

</programlisting>

378

395

</informalexample>

379

</refsect1>

396

</refsect1>

380

397

381

398

382

399

383

400

<para>

384

<citerefentry><refentrytitle>mandos-keygen</refentrytitle>

385

<manvolnum>8</manvolnum></citerefentry>,

386

<citerefentry><refentrytitle>mandos.conf</refentrytitle>

387

<manvolnum>5</manvolnum></citerefentry>,

388

<citerefentry><refentrytitle>mandos</refentrytitle>

389

401

402

<refentrytitle>mandos</refentrytitle>

403

404

<refentrytitle>mandos-keygen</refentrytitle>

405

406

<refentrytitle>mandos.conf</refentrytitle>

407

390

408

</para>

391

409

</refsect1>

392

410

</refentry>

393

394

395

396

397