/mandos/trunk : revision 156

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to plugins.d/password-request.xml

Committer: Teddy Hogeborn
Date: 2008-09-04 13:36:59 UTC
Revision ID: teddy@fukt.bsnet.se-20080904133659-0omre4j6luosb20q

* mandos-clients.conf.xml (OPTIONS): Improved spelling.

* mandos.conf.xml (BUGS): - '' -

* mandos.xml (BUGS): - '' -

* plugin-runner.xml (NAME): Fix spelling by changing wording.
  (OPTIONS): Improved spelling.
  (EXAMPLE): Do not use obsolete "--keydir" option.  Improved wording.

* plugins.d/password-prompt.xml (DESCRIPTION): Improved spelling.
  (EXAMPLE): Add <acronym> tag.
  (SECURITY): Improved spelling.

* plugins.d/password-request.xml (SYNOPSIS): Changed replaceable to
                                             match OPTIONS section.
  (DESCRIPTION, OVERVIEW): Improved spelling.

files added:
README

files modified:
TODO

initramfs-tools-hook

mandos-clients.conf.xml

mandos.conf.xml

mandos.xml

plugin-runner.xml

plugins.d/password-prompt.xml

plugins.d/password-request.xml

Show diffs side-by-side

added added

removed removed

plugins.d/password-request.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY VERSION "1.0">

<!ENTITY COMMANDNAME "password-request">

<!ENTITY TIMESTAMP "2008-09-03">

<!ENTITY TIMESTAMP "2008-09-04">

<command>&COMMANDNAME;</command>

<group>

<arg choice="plain"><option>--connect

<replaceable>IPADDR</replaceable><literal>:</literal

<replaceable>ADDRESS</replaceable><literal>:</literal

><replaceable>PORT</replaceable></option></arg>

<arg choice="plain"><option>-c

<replaceable>IPADDR</replaceable><literal>:</literal

<replaceable>ADDRESS</replaceable><literal>:</literal

><replaceable>PORT</replaceable></option></arg>

</group>

<sbr/>

<group>

<arg choice="plain"><option>--keydir

<replaceable>DIRECTORY</replaceable></option></arg>

<arg choice="plain"><option>-d

<replaceable>DIRECTORY</replaceable></option></arg>

</group>

<sbr/>

<group>

<arg choice="plain"><option>--interface

<arg choice="plain"><option>-i

131

124

network connectivity, Zeroconf to find servers, and TLS with an

132

125

OpenPGP key to ensure authenticity and confidentiality. It

133

126

keeps running, trying all servers on the network, until it

134

receives a satisfactory reply or a TERM signal is recieved.

127

receives a satisfactory reply or a TERM signal is received.

135

128

</para>

136

129

<para>

137

130

This program is not meant to be run directly; it is really meant

191

184

</varlistentry>

192

185

193

186

194

<term><option>--keydir=<replaceable

195

>DIRECTORY</replaceable></option></term>

196

<term><option>-d

197

<replaceable>DIRECTORY</replaceable></option></term>

198

199

<para>

200

Directory to read the OpenPGP key files

201

<filename>pubkey.txt</filename> and

202

<filename>seckey.txt</filename> from. The default is

203

<filename>/conf/conf.d/mandos</filename> (in the initial

204

<acronym>RAM</acronym> disk environment).

205

</para>

206

</listitem>

207

</varlistentry>

208

209

210

187

<term><option>--interface=

211

188

212

189

<term><option>-i

232

209

233

210

234

211

<para>

235

OpenPGP public key file base name. This will be combined

236

with the directory from the <option>--keydir</option>

237

option to form an absolute file name. The default name is

238

<quote><literal>pubkey.txt</literal></quote>.

212

OpenPGP public key file name. The default name is

213

<quote><filename>/conf/conf.d/mandos/pubkey.txt</filename

214

></quote>.

239

215

</para>

240

216

</listitem>

241

217

</varlistentry>

247

223

248

224

249

225

<para>

250

OpenPGP secret key file base name. This will be combined

251

with the directory from the <option>--keydir</option>

252

option to form an absolute file name. The default name is

253

<quote><literal>seckey.txt</literal></quote>.

226

OpenPGP secret key file name. The default name is

227

<quote><filename>/conf/conf.d/mandos/seckey.txt</filename

228

></quote>.

254

229

</para>

255

230

</listitem>

256

231

</varlistentry>

339

314

at all. This is why a separate plugin (<citerefentry>

340

315

<refentrytitle>password-prompt</refentrytitle>

341

316

<manvolnum>8mandos</manvolnum></citerefentry>) does that, which

342

will be run in parallell to this one by the plugin runner.

317

will be run in parallel to this one by the plugin runner.

343

318

</para>

344

319

</refsect1>

345

320

420

395

</informalexample>

421

396

422

397

<para>

423

Run in debug mode, and use a custom key directory:

398

Run in debug mode, and use a custom key:

424

399

</para>

425

400

<para>

426

427

<userinput>&COMMANDNAME; --debug --keydir keydir</userinput>

401

402

403

<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt</userinput>

404

428

405

</para>

429

406

</informalexample>

430

407

431

408

<para>

432

Run in debug mode, with a custom key directory, and do not use

433

Zeroconf to locate a server; connect directly to the IPv6

434

address <quote><systemitem class="ipaddress"

409

Run in debug mode, with a custom key, and do not use Zeroconf

410

to locate a server; connect directly to the IPv6 address

411

<quote><systemitem class="ipaddress"

435

412

>2001:db8:f983:bd0b:30de:ae4a:71f2:f672</systemitem></quote>,

436

413

port 4711, using interface eth2:

437

414

</para>

438

415

<para>

439

416

440

417

441

<userinput>&COMMANDNAME; --debug --keydir keydir --connect 2001:db8:f983:bd0b:30de:ae4a:71f2:f672:4711 --interface eth2</userinput>

418

<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt --connect 2001:db8:f983:bd0b:30de:ae4a:71f2:f672:4711 --interface eth2</userinput>

442

419

443

420

</para>

444

421

</informalexample>

Older »