/mandos/trunk : revision 617

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

Committer: Teddy Hogeborn
Date: 2013-05-22 20:00:18 UTC
Revision ID: teddy@recompile.se-20130522200018-xtbddz21pl7c69kw

* mandos: Bug fix: Don't print output from checkers when running in
          foreground.
          Bug fix: Do not fail when client is removed from
          clients.conf but saved settings remain.
  (Client.server_settings): New attribute.
  (Client.__init__): Take new "server_settings" keyword argument.  All
                     callers changed.
  (Client.start_checker): Redirect stdout and stderr for checkers when
                          running in foreground.
  (main): New "wnull" global variable for a writable /dev/null file.
          Do not restore settings for clients no longer in config file.
  (main/cleanup): Close wnull file object.  Do not save client
                  attribute "server_settings"
* mandos-monitor: Update to work in Urwid 1.0.1.
                  Adapt to work in both Python 3 and Python 2.

Show diffs side-by-side

added added

removed removed

mandos-clients.conf.xml

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY CONFNAME "mandos-clients.conf">

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

<!ENTITY TIMESTAMP "2012-05-27">

<!ENTITY TIMESTAMP "2012-06-23">

<!ENTITY % common SYSTEM "common.ent">

%common;

335

<option>extended_timeout</option> option.

336

</para>

337

<para>

338

The <replaceable>TIME</replaceable> is specified as a

339

space-separated number of values, each of which is a

340

number and a one-character suffix. The suffix must be one

341

of <quote>d</quote>, <quote>s</quote>, <quote>m</quote>,

342

<quote>h</quote>, and <quote>w</quote> for days, seconds,

343

minutes, hours, and weeks, respectively. The values are

344

added together to give the total time value, so all of

345

<quote><literal>330s</literal></quote>,

346

<quote><literal>110s 110s 110s</literal></quote>, and

347

<quote><literal>5m 30s</literal></quote> will give a value

348

of five minutes and thirty seconds.

338

The <replaceable>TIME</replaceable> is specified as an RFC

339

3339 duration; for example

340

<quote><literal>P1Y2M3DT4H5M6S</literal></quote> meaning

341

one year, two months, three days, four hours, five

342

minutes, and six seconds. Some values can be omitted, see

343

RFC 3339 Appendix A for details.

349

344

</para>

350

345

</listitem>

351

346

</varlistentry>

465

460

466

461

467

462

[DEFAULT]

468

timeout = 5m

469

interval = 2m

463

timeout = PT5M

464

interval = PT2M

470

465

checker = fping -q -- %%(host)s

471

466

472

467

# Client "foo"

489

484

4T2zw4dxS5NswXWU0sVEXxjs6PYxuIiCTL7vdpx8QjBkrPWDrAbcMyBr2O

490

485

QlnHIvPzEArRQLo=

491

486

host = foo.example.org

492

interval = 1m

487

interval = PT1M

493

488

494

489

# Client "bar"

495

490

[bar]

496

491

fingerprint = 3e393aeaefb84c7e89e2f547b3a107558fca3a27

497

492

secfile = /etc/mandos/bar-secret

498

timeout = 15m

493

timeout = PT15M

499

494

approved_by_default = False

500

approval_delay = 30s

495

approval_delay = PT30S

501

496

</programlisting>

502

497

</informalexample>

503

498

</refsect1>

516

511

<citerefentry><refentrytitle>fping</refentrytitle>

517

512

518

513

</para>

514

515

516

<term>

517

RFC 3339: <citetitle>Date and Time on the Internet:

518

Timestamps</citetitle>

519

</term>

520

521

<para>

522

The time intervals are in the "duration" format, as

523

specified in ABNF in Appendix A of RFC 3339.

524

</para>

525

</listitem>

526

</varlistentry>

527

</variablelist>

519

528

</refsect1>

520

529

</refentry>

521

530

Older »