/mandos/trunk : revision 487

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2011-07-16 00:29:19 UTC
Revision ID: teddy@fukt.bsnet.se-20110716002919-r77yikuiulj42o40

* initramfs-tools-script: Abort if plugin-runner is missing.  Removed
                          workaround for Debian bug #633582; the
                          workaround required getopt, which can not be
                          guaranteed.
* plugin-runner.c (main): Work around Debian bug #633582.
* plugins.d/mandos-client.c (main): - '' -

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2011-09-24">

<!ENTITY TIMESTAMP "2011-02-27">

<!ENTITY % common SYSTEM "common.ent">

%common;

182

</varlistentry>

183

184

185

<term><option>extended_timeout<literal> = </literal><replaceable

186

>TIME</replaceable></option></term>

187

188

<para>

189

This option is <emphasis>optional</emphasis>.

190

</para>

191

<para>

192

Extended timeout is an added timeout that is given once

193

after a password has been sent sucessfully to a client.

194

The timeout is by default longer than the normal timeout,

195

and is used for handling the extra long downtime while a

196

machine is booting up. Time to take into consideration

197

when changing this value is file system checks and quota

198

checks. The default value is 15 minutes.

199

</para>

200

<para>

201

The format of <replaceable>TIME</replaceable> is the same

202

as for <varname>timeout</varname> below.

203

</para>

204

</listitem>

205

</varlistentry>

206

207

208

185

<term><option>fingerprint<literal> = </literal

209

186

><replaceable>HEXSTRING</replaceable></option></term>

210

187

252

229

will wait for a checker to complete until the below

253

230

<quote><varname>timeout</varname></quote> occurs, at which

254

231

time the client will be disabled, and any running checker

255

killed. The default interval is 2 minutes.

232

killed. The default interval is 5 minutes.

256

233

</para>

257

234

<para>

258

235

The format of <replaceable>TIME</replaceable> is the same

322

299

This option is <emphasis>optional</emphasis>.

323

300

</para>

324

301

<para>

325

The timeout is how long the server will wait, after a

326

successful checker run, until a client is disabled and not

327

allowed to get the data this server holds. By default

328

Mandos will use 5 minutes. See also the

329

<option>extended_timeout</option> option.

302

The timeout is how long the server will wait (for either a

303

successful checker run or a client receiving its secret)

304

until a client is disabled and not allowed to get the data

305

this server holds. By default Mandos will use 1 hour.

330

306

</para>

331

307

<para>

332

308

The <replaceable>TIME</replaceable> is specified as a

444

420

445

421

446

422

[DEFAULT]

447

timeout = 5m

448

interval = 2m

423

timeout = 1h

424

interval = 5m

449

425

checker = fping -q -- %%(host)s

450

426

451

427

# Client "foo"

484

460

485

461

486

462

<para>

487

<citerefentry><refentrytitle>intro</refentrytitle>

488

<manvolnum>8mandos</manvolnum></citerefentry>,

489

463

<citerefentry><refentrytitle>mandos-keygen</refentrytitle>

490

464

<manvolnum>8</manvolnum></citerefentry>,

491

465

<citerefentry><refentrytitle>mandos.conf</refentrytitle>

Older »