/mandos/trunk : revision 290

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to plugins.d/mandos-client.xml

Committer: Teddy Hogeborn
Date: 2009-01-29 22:22:32 UTC
Revision ID: teddy@fukt.bsnet.se-20090129222232-p9hqnq338nsvxayp

* mandos (main): Bug fix: Do setgid before setuid. Add verbose GnuTLS
debugging messages.
* plugins.d/mandos-client.c (main): Bug fix: Do setgid before setuid.

Show diffs side-by-side

added added

removed removed

plugins.d/mandos-client.xml

<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY COMMANDNAME "mandos-client">

<!ENTITY TIMESTAMP "2009-02-09">

<!ENTITY TIMESTAMP "2009-01-24">

<!ENTITY % common SYSTEM "../common.ent">

%common;

</arg>

<sbr/>

<arg>

<option>--delay <replaceable>SECONDS</replaceable></option>

</arg>

<sbr/>

<arg>

100

<option>--debug</option>

101

</arg>

102

</cmdsynopsis>

195

191

</varlistentry>

196

192

197

193

198

<term><option>--interface=<replaceable

199

>NAME</replaceable></option></term>

194

<term><option>--interface=

195

200

196

<term><option>-i

201

197

202

198

203

199

<para>

204

200

Network interface that will be brought up and scanned for

205

Mandos servers to connect to. The default is

201

Mandos servers to connect to. The default it

206

202

<quote><literal>eth0</literal></quote>.

207

203

</para>

208

204

<para>

219

215

until much later in the boot process, and can not be used

220

216

by this program.

221

217

</para>

222

<para>

223

<replaceable>NAME</replaceable> can be the empty string;

224

this will not use any specific interface, and will not

225

bring up an interface on startup. This is not

226

recommended, and only meant for advanced users.

227

</para>

228

218

</listitem>

229

219

</varlistentry>

230

220

275

265

</para>

276

266

</listitem>

277

267

</varlistentry>

278

279

280

<term><option>--delay=<replaceable

281

>SECONDS</replaceable></option></term>

282

283

<para>

284

After bringing the network interface up, the program waits

285

for the interface to arrive in a <quote>running</quote>

286

state before proceeding. During this time, the kernel log

287

level will be lowered to reduce clutter on the system

288

console, alleviating any other plugins which might be

289

using the system console. This option sets the upper

290

limit of seconds to wait. The default is 2.5 seconds.

291

</para>

292

</listitem>

293

</varlistentry>

294

268

295

269

296

270

<term><option>--debug</option></term>

452

426

453

427

<para>

454

428

Run in debug mode, with a custom key, and do not use Zeroconf

455

to locate a server; connect directly to the IPv6 link-local

456

address <quote><systemitem class="ipaddress"

457

>fe80::aede:48ff:fe71:f6f2</systemitem></quote>, port 4711,

458

using interface eth2:

429

to locate a server; connect directly to the IPv6 address

430

<quote><systemitem class="ipaddress"

431

>2001:db8:f983:bd0b:30de:ae4a:71f2:f672</systemitem></quote>,

432

port 4711, using interface eth2:

459

433

</para>

460

434

<para>

461

435

462

436

463

<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt --connect fe80::aede:48ff:fe71:f6f2:4711 --interface eth2</userinput>

437

<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt --connect 2001:db8:f983:bd0b:30de:ae4a:71f2:f672:4711 --interface eth2</userinput>

464

438

465

439

</para>

466

440

</informalexample>

Older »