/mandos/trunk : revision 505.1.1

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2011-10-03 14:58:41 UTC
mto: (505.2.5 mandos-client-network-hooks)
mto: This revision was merged to the branch mainline in revision 506.
Revision ID: teddy@fukt.bsnet.se-20111003145841-4b6euesc9i9974am

* mandos (transitional_dbus_metaclass): Renamed to
                                        "AlternateDBusNamesMetaclass".
                                        All users changed.  Also added
                                        comments, wrapped lines, and
                                        searching of all base classes
                                        for D-Bus attributes.  It now
                                        adds the *old* interface name,
                                        not the new one.
  (ClientDBus, MandosDBusService): Use the new interface names.

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2011-02-27">

<!ENTITY TIMESTAMP "2011-09-24">

<!ENTITY % common SYSTEM "common.ent">

%common;

182

</varlistentry>

183

184

185

<term><option>extended_timeout<literal> = </literal><replaceable

186

>TIME</replaceable></option></term>

187

188

<para>

189

This option is <emphasis>optional</emphasis>.

190

</para>

191

<para>

192

Extended timeout is an added timeout that is given once

193

after a password has been sent sucessfully to a client.

194

The timeout is by default longer than the normal timeout,

195

and is used for handling the extra long downtime while a

196

machine is booting up. Time to take into consideration

197

when changing this value is file system checks and quota

198

checks. The default value is 15 minutes.

199

</para>

200

<para>

201

The format of <replaceable>TIME</replaceable> is the same

202

as for <varname>timeout</varname> below.

203

</para>

204

</listitem>

205

</varlistentry>

206

207

185

208

<term><option>fingerprint<literal> = </literal

186

209

><replaceable>HEXSTRING</replaceable></option></term>

187

210

229

252

will wait for a checker to complete until the below

230

253

<quote><varname>timeout</varname></quote> occurs, at which

231

254

time the client will be disabled, and any running checker

232

killed. The default interval is 5 minutes.

255

killed. The default interval is 2 minutes.

233

256

</para>

234

257

<para>

235

258

The format of <replaceable>TIME</replaceable> is the same

299

322

This option is <emphasis>optional</emphasis>.

300

323

</para>

301

324

<para>

302

The timeout is how long the server will wait (for either a

303

successful checker run or a client receiving its secret)

304

until a client is disabled and not allowed to get the data

305

this server holds. By default Mandos will use 1 hour.

325

The timeout is how long the server will wait, after a

326

successful checker run, until a client is disabled and not

327

allowed to get the data this server holds. By default

328

Mandos will use 5 minutes. See also the

329

<option>extended_timeout</option> option.

306

330

</para>

307

331

<para>

308

332

The <replaceable>TIME</replaceable> is specified as a

420

444

421

445

422

446

[DEFAULT]

423

timeout = 1h

424

interval = 5m

447

timeout = 5m

448

interval = 2m

425

449

checker = fping -q -- %%(host)s

426

450

427

451

# Client "foo"

460

484

461

485

462

486

<para>

487

<citerefentry><refentrytitle>intro</refentrytitle>

488

<manvolnum>8mandos</manvolnum></citerefentry>,

463

489

<citerefentry><refentrytitle>mandos-keygen</refentrytitle>

464

490

<manvolnum>8</manvolnum></citerefentry>,

465

491

<citerefentry><refentrytitle>mandos.conf</refentrytitle>

Older »