Charles.Forsyth20060303-partialeea662d19 years agoHistory
137 lines · 3.2 KB · Text
RawDownload
.TH SVC 8.SH NAMEsvc: auth, net, registry, rstyx, styx \- start Inferno network services.SH SYNOPSIS.B svc/net.br.B svc/auth.br.B svc/registry.br.B svc/rstyx.br.B svc/styx.SH DESCRIPTIONThe directory.B /dis/svccontains several.IR sh (1)scripts to start network listeners (see.IR listen (1))that give remote hosts access to specific Inferno services on the current host.The scripts can be edited to suit (or configure themselves to suit) therequirements of a particular site..PPA host that is not an authentication server and wishes to start the usual network servicescan simply invoke.BR svc/net ,which runs all the others.I exceptauthentication.Authentication servers should normally run.B svc/authinstead, to start local name and authentication services, and a listenerfor each authentication service but.I notfile service or remote execution..PP.I Authmust be run (only) on a host that is to act as an authentication server,providing signing and other authentication services to itself and the network.The files.BR /keydb/signerkey ,created by.IR createsignerkey (8),and.BR /keydb/keys ,managed by.IR changelogin (8),must exist.If so,.I authstarts.IR keyfs (4),which prompts for the password that protects.BR /keydb/keys ,the file of secrets sharedwith registered users.If the key file is empty, the confirmed password will be used in future to encrypt and decrypt the file;otherwise the password must match the one used to encrypt the key file.If the password is valid, listeners are started for.IR keysrv (4),to allow passwords to be changed remotely,.IR logind (8),to provide signed certificates,and.IR signer (8).Note that although an authentication server must be present to run.IR getauthinfo (8)to obtain credentials to access another service, once those have beenissued, the recipient can subsequently present them (if still valid) toaccess that service without further involvement by the service (ie, itneed not then be running).See.IR changelogin (8)for the user registration program, which can be used once.I authhas started..PP.I Registrystarts the dynamic service registry (see.IR registry (4))if it is not already running,putting it at the conventional location for the local registry,.BR /mnt/registry .Initial (static) service descriptions are taken from.B /lib/ndb/registryif it exists.It then starts a listener to give other hosts access to the registry as a Styxservice at.BR tcp!*!registry ,normally port 6675..PP.I Rstyxlistens for incoming calls to the.B rstyxservice, and invokes.IR rstyxd (8)to deal with each one..PP.I Styxlistens for incoming calls to the.B styxservice,and for each one, authenticates the caller, then calls.IR export (4)to export the current root..SH FILES.TF /keydb/signerkey.TP.B /keydb/keysencrypted file containing user secrets.TP.B /keydb/signerkeyprivate key of authentication server.SH SOURCE.B /appl/svc/auth.sh.br.B /appl/svc/net.sh.br.B /appl/svc/registry.sh.br.B /appl/svc/rstyx.sh.br.B /appl/svc/styx.sh.SH SEE ALSO.IR listen (1),.IR export (4),.IR keyfs (4),.IR keysrv (4),.IR registry (4),.IR changelogin (8),.IR createsignerkey (8),.IR cs (8),.IR dns (8),.IR logind (8),.IR rstyxd (8),.IR signer (8)