/mandos/trunk : revision 139

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-options.xml

Committer: Teddy Hogeborn
Date: 2008-09-02 10:27:08 UTC
Revision ID: teddy@fukt.bsnet.se-20080902102708-j5k6ec3lcgkaeipv

* plugin-runner.xml: Changed short option for "--global-env" to "-G",
                     changed short option for "--env-for" to "-E".
                     added new options "--enable" ("-e") and
                     "--config-file".
  (ENVIRONMENT): Added text.
  (FILES): Changed id to "files".  Improved wording and add more text.

Show diffs side-by-side

added added

removed removed

mandos-options.xml

If this is specified, the server will only announce the service

and listen to requests on network interface

<replaceable>IF</replaceable>. Default is to use all available

interfaces. <emphasis>Note:</emphasis> a failure to bind to the

specified interface is not considered critical, and the server

does not exit, but will instead continue starting normally.

and listen to requests on the specified network interface.

Default is to use all available interfaces. <emphasis

>Note:</emphasis> a failure to bind to the specified

interface is not considered critical, and the server will not

exit, but instead continue normally.

</para>

interface should be set, since a link-local address is only valid

on a single interface. By default, the server will listen to all

available addresses. If set, this must be an IPv6 address; an

IPv4 address can only be specified using the <quote><systemitem

class="ipaddress">::FFFF:192.0.2.3</systemitem ></quote> format.

IPv4 address can only be specified using IPv4-mapped IPv6 address

syntax: <quote><systemitem class="ipaddress"

>::FFFF:192.0.2.3</systemitem ></quote>.

</para>

If the server is run in debug mode, it will run in the foreground

and print a lot of debugging information. The default is

<emphasis>not</emphasis> to run in debug mode.

and print a lot of debugging information. The default is to

<emphasis>not</emphasis> run in debug mode.

</para>

GnuTLS priority string for the TLS handshake with the clients.

The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal></quote>.

See <citerefentry><refentrytitle>gnutls_priority_init

</refentrytitle><manvolnum>3</manvolnum></citerefentry> for the

syntax. <emphasis>Warning</emphasis>: changing this may make the

TLS handshake fail, making communication with clients impossible.

GnuTLS priority string for the <acronym>TLS</acronym> handshake

with the clients. The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal

></quote>. See <citerefentry>

<refentrytitle>gnutls_priority_init</refentrytitle>

<manvolnum>3</manvolnum></citerefentry> for the syntax.

<emphasis>Warning</emphasis>: changing this may make the

<acronym>TLS</acronym> handshake fail, making communication with

clients impossible.

</para>

Older »