.TH GETAUTHINFO 8.SH NAMEgetauthinfo \- obtain a certificate for authentication.SH SYNOPSIS.BI getauthinfo " keyname".PP.B wm/getauthinfo.SH DESCRIPTION.I Getauthinfomakes contact with.IR logind (8)on a `signer', or certifying authority, with which the userhas previously been registered using.IR changelogin (8),to obtain a certificate thatcan later be presented to other Inferno services to authenticate the user.If.I keynamestarts with a `/', the certificate is stored there; otherwise, it is stored in the file.BI /usr/ user /keyring/ keyname,where.I useris the name in.B /dev/user(see.IR cons (3)).The directory.BI /usr/ user /keyringmust exist..PPThe user is prompted for the following:.TPsignerThe name of the signing server, for example.BR signer.froop.com .The default is the default signer for the site:the value of.B SIGNERin the local network configuration database(see.IR ndb (6))..TPremote user nameThe name of the user for whom a certificate is to be obtained. The default is the current user name in.BR /dev/user ..TPpasswordThe user's password. The password entered on the client must match the passwordpreviously stored on the server using.IR changelogin (8),or a certificate will be refused..TPsave in file?The default is `no'. If the user responds `yes', the certificate is written directly to the file.Otherwise,.I getauthinfobecomes a file server, servinga secure temporary file bound overthe file name above (because that is where applications look for it).The temporary will disappear if the name is unmounted, or Inferno is rebooted..PPNote that the certificate will expire at or before expiry of the password entryon the signer..PPThe signer needs its own key to endorse the certificates that it gives to clients.If a user requests a certificate with.IR getauthinfo (8)before the signer's key is created on the signer (eg,using.IR createsignerkey (8)),then the request will be rejected with a suitable diagnosticby.IR logind (8)..SS "File servers".PPMachines that will be file servers must obtain a certificate and save the certificate in a key file named.BR default ,thus:.IP.B "getauthinfo default".PPThe user invoking.I getauthinfomust be the same user who later runs.IR svc (8)to start the machine's services..SS "File server clients"Machines that wish to be authenticated clients of file servers must obtain a certificate and store the certificate in a file named.IB net ! machine.The file name must match exactly theserver address given to.I mount(see.IR bind (1)).To set the key, use.IP.BI getauthinfo " net" ! host.SS Window system interface.I Getauthinfohas a visual counterpart.B wm/getauthinfofor use under.IR wm (1).It takes no arguments.It displays a window prompting for all the information it needs,and offering apparently sensible defaults.Apart from the different interface, its function is otherwisethe same as the command line version..SH FILES.TF /usr/username/keyring/net!machine.TP.BI /usr/ user /keyring/ net ! machinewhere a certificate is stored on a client machine.TP.BI /usr/ user /keyring/defaultwhere a certificate is stored on a file server.TP.B /lib/ndb/localcontains the default host name of the signer.SH SOURCE.B /appl/cmd/getauthinfo.b.br.B /appl/wm/getauthinfo.b.SH "SEE ALSO".IR bind (1),.IR changelogin (8),.IR createsignerkey (8)