harvey/sys/man/8/secstore

.TH SECSTORE 8
.SH NAME
secstored, secuser \- secstore commands
.SH SYNOPSIS
.br
.B auth/secstored
[-S servername]
[-s tcp!*!5356]
[-x]
.br
.B auth/secuser
[-v]
username
.br
.PP
.SH DESCRIPTION
.PP
.I Secstored
serves requests from
.IR secstore (1).
The
.B -x
option announces on
.B /net.alt/tcp!*!5356
instead of the default
.BR /net .
.PP
.I Secuser
is an administrative command that runs on the
secstore machine, normally the authserver,
to create new accounts and
to change status on existing accounts.
It prompts for account information such as
password and expiration date, writing to
.BR /adm/secstore/who/$uid .
The
.B /adm/secstore
directory should be created mode 770 for the userid
or groupid of the secstored process.
.PP
By default,
.I secstored
warns the client if no account exists.
If you prefer to obscure this information, use
.I secuser
to create an account
.BR FICTITIOUS .
.SH FILES
.B /adm/secstore/who/$uid
secstore account name, expiration date, verifier
.br
.B /adm/secstore/store/$uid/
users' files
.br
.B /lib/ndb/auth
for mapping local userid to RADIUS userid
.SH SOURCE
.B /sys/src/cmd/auth/secstore
.SH SEE ALSO
.IR secstore (1)