/mandos/trunk : revision 604

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2012-06-17 02:30:59 UTC
Revision ID: teddy@recompile.se-20120617023059-em4nfnxg1tsn64xj

* plugins.d/mandos-client (start_mandos_communication): Bug fix; skip
                                                        non-specified
                                                        interfaces.
  (main): Use lower_privileges() consistently.  Bug fix: Don't remove
          "none" from list of interfaces.  Make --interface=none work
          again by not bringing up interfaces specified after "none".
* plugins.d/mandos-client.xml (OPTIONS): Document new meaning of
                                         specifying --interface=none
                                         together with other
                                         interface names,

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2012-06-23">

<!ENTITY TIMESTAMP "2012-05-27">

<!ENTITY % common SYSTEM "common.ent">

%common;

335

<option>extended_timeout</option> option.

336

</para>

337

<para>

338

The <replaceable>TIME</replaceable> is specified as an RFC

339

3339 duration; for example

340

<quote><literal>P1Y2M3DT4H5M6S</literal></quote> meaning

341

one year, two months, three days, four hours, five

342

minutes, and six seconds. Some values can be omitted, see

343

RFC 3339 Appendix A for details.

338

The <replaceable>TIME</replaceable> is specified as a

339

space-separated number of values, each of which is a

340

number and a one-character suffix. The suffix must be one

341

of <quote>d</quote>, <quote>s</quote>, <quote>m</quote>,

342

<quote>h</quote>, and <quote>w</quote> for days, seconds,

343

minutes, hours, and weeks, respectively. The values are

344

added together to give the total time value, so all of

345

<quote><literal>330s</literal></quote>,

346

<quote><literal>110s 110s 110s</literal></quote>, and

347

<quote><literal>5m 30s</literal></quote> will give a value

348

of five minutes and thirty seconds.

344

349

</para>

345

350

</listitem>

346

351

</varlistentry>

460

465

461

466

462

467

[DEFAULT]

463

timeout = PT5M

464

interval = PT2M

468

timeout = 5m

469

interval = 2m

465

470

checker = fping -q -- %%(host)s

466

471

467

472

# Client "foo"

484

489

4T2zw4dxS5NswXWU0sVEXxjs6PYxuIiCTL7vdpx8QjBkrPWDrAbcMyBr2O

485

490

QlnHIvPzEArRQLo=

486

491

host = foo.example.org

487

interval = PT1M

492

interval = 1m

488

493

489

494

# Client "bar"

490

495

[bar]

491

496

fingerprint = 3e393aeaefb84c7e89e2f547b3a107558fca3a27

492

497

secfile = /etc/mandos/bar-secret

493

timeout = PT15M

498

timeout = 15m

494

499

approved_by_default = False

495

approval_delay = PT30S

500

approval_delay = 30s

496

501

</programlisting>

497

502

</informalexample>

498

503

</refsect1>

511

516

<citerefentry><refentrytitle>fping</refentrytitle>

512

517

513

518

</para>

514

515

516

<term>

517

RFC 3339: <citetitle>Date and Time on the Internet:

518

Timestamps</citetitle>

519

</term>

520

521

<para>

522

The time intervals are in the "duration" format, as

523

specified in ABNF in Appendix A of RFC 3339.

524

</para>

525

</listitem>

526

</varlistentry>

527

</variablelist>

528

519

</refsect1>

529

520

</refentry>

530

521

Older »