2005-12-08 12:14:33 +00:00
|
|
|
=head1 NAME
|
|
|
|
|
2007-11-11 22:54:56 +00:00
|
|
|
kas_interactive - Enters interactive mode
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
<div class="synopsis">
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
B<kas interactive>
|
2006-03-01 05:02:29 +00:00
|
|
|
S<<< [B<-admin_username> <I<admin principal to use for authentication>>] >>>
|
|
|
|
S<<< [B<-password_for_admin> <I<admin password>>] >>> S<<< [B<-cell> <I<cell name>>] >>>
|
|
|
|
S<<< [B<-servers> <I<explicit list of authentication servers>>+] >>>
|
2005-12-13 19:21:13 +00:00
|
|
|
[B<-noauth>] [B<-help>]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
B<kas i> S<<< [B<-a> <I<admin principal to use for authentication>>] >>>
|
|
|
|
S<<< [B<-p> <I<admin password>>] >>> S<<< [B<-c> <I<cell name>>] >>>
|
|
|
|
S<<< [B<-s> <I<explicit list of authentication servers>>+] >>> [B<-n>] [B<-h>]
|
|
|
|
|
|
|
|
=for html
|
|
|
|
</div>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
The B<kas interactive> command establishes an interactive session for the
|
|
|
|
issuer of the command. By default, the command interpreter establishes an
|
|
|
|
authenticated connection for the user logged into the local file system
|
|
|
|
with all of the Authentication Servers listed in the local
|
|
|
|
F</usr/vice/etc/CellServDB> file for the cell named in the local
|
|
|
|
F</usr/vice/etc/ThisCell> file. To specify an alternate identity, cell
|
|
|
|
name, or list of Authentication Servers, include the B<-admin_username>,
|
|
|
|
B<-cell>, or B<-servers> arguments respectively. Interactive mode lasts
|
|
|
|
for six hours unless the maximum ticket lifetime for the issuer or the
|
|
|
|
Authentication Server's Ticket Granting Service is shorter.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
There are two other ways to enter interactive mode, in addition to the
|
|
|
|
B<kas interactive> command:
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=over 4
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item *
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Type the kas command at the shell prompt without any operation code. If
|
|
|
|
appropriate, include one or more of the B<-admin_username>,
|
|
|
|
B<-password_for_admin>, B<-cell>, and B<-servers> arguments.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Type the kas command followed by a user name and cell name, separated by
|
doc: replace hostnames with IETF example hostnames
There were several different real and made-up hostnames and company names used
throughout our documentation examples.
The IETF has reserved "example.com" and other "example" TLDs for use in
examples (RFC 2606). Replace almost all references to ABC Corporation, DEF
Corporation, and State University, as well as "abc.com", "bigcell.com",
"def.com", "def.gov", "ghi.com", "ghi.gov", "jkl.com", "mit.edu",
"stanford.edu", "state.edu", "stateu.edu", "uncc.edu", and "xyz.com".
Standardize on "Example Corporation", "Example Network", "Example
Organization" (example.com, example.net, and example.org).
The Scout documentation in the Admin Guide contains PNG images that contain
the old cell names, so I left those references until the images can be
replaced.
Change-Id: I4e44815b2d2ffe204810b7fd850842248f67c367
Reviewed-on: http://gerrit.openafs.org/6697
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
2012-02-11 16:43:30 +00:00
|
|
|
an C<@> sign (for example: B<kas admin@example.com>), to establish a
|
2005-12-13 19:21:13 +00:00
|
|
|
connection under the specified identity with the Authentication Servers
|
|
|
|
listed in the local F</usr/vice/etc/CellServDB> file for the indicated
|
|
|
|
cell. If appropriate, provide the B<-servers> argument to specify an
|
|
|
|
alternate list of Authentication Server machines that belong to the
|
|
|
|
indicated cell.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=back
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
There are several consequences of entering interactive mode:
|
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
The C<< ka> >> prompt replaces the system (shell) prompt. When typing
|
|
|
|
commands at this prompt, provide only the operation code (omit the command
|
|
|
|
suite name, B<kas>).
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
The command interpreter does not prompt for the issuer's password.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
The issuer's identity and password, the relevant cell, and the set of
|
2005-12-13 19:21:13 +00:00
|
|
|
Authentication Server machines specified when entering interactive mode
|
|
|
|
apply to all commands issued during the session. They cannot be changed
|
|
|
|
without leaving the session, except by using the B<kas noauthentication>
|
|
|
|
command to replace the current authenticated connections with
|
|
|
|
unauthenticated ones. The B<-admin_username>, B<-password_for_admin>,
|
|
|
|
B<-cell>, and B<-servers> arguments are ignored if provided on a command
|
|
|
|
issued during interactive mode.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
To establish an unauthenticated connection to the Authentication Server,
|
2005-12-13 19:21:13 +00:00
|
|
|
include the B<-noauth> flag or provide an incorrect password. Unless
|
|
|
|
authorization checking is disabled on each Authentication Server machine
|
|
|
|
involved, however, it is not possible to perform any privileged operations
|
|
|
|
within such a session.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
To end the current authenticated connection and establish an
|
2005-12-13 19:21:13 +00:00
|
|
|
unauthenticated one, issue the B<kas noauthentication> command. To leave
|
|
|
|
interactive mode and return to the regular shell prompt, issue the B<kas
|
|
|
|
quit> command.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-admin_username> <I<admin principal>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Specifies the user identity under which to authenticate with the
|
2005-12-13 19:21:13 +00:00
|
|
|
Authentication Server for execution of the command. For more details, see
|
|
|
|
L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-password_for_admin> <I<admin password>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Specifies the password of the command's issuer. If it is omitted (as
|
|
|
|
recommended), the B<kas> command interpreter prompts for it and does not
|
|
|
|
echo it visibly. For more details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-cell> <I<cell name>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names the cell in which to run the command. For more details, see
|
2005-12-13 19:21:13 +00:00
|
|
|
L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-servers> <I<authentication servers>>+
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names each machine running an Authentication Server with which to
|
2005-12-13 19:21:13 +00:00
|
|
|
establish a connection. For more details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-noauth>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Assigns the unprivileged identity C<anonymous> to the issuer. For more
|
|
|
|
details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-help>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Prints the online help for this command. All other valid options are
|
|
|
|
ignored.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
=head1 EXAMPLES
|
|
|
|
|
|
|
|
The following example shows a user entering interactive mode as the
|
2005-12-13 19:21:13 +00:00
|
|
|
privileged user C<admin>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
% kas interactive admin
|
|
|
|
Password for admin: I<admin_password>
|
|
|
|
ka>
|
|
|
|
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
|
|
|
|
None
|
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
L<kas(8)>,
|
|
|
|
L<kas_noauthentication(8)>,
|
|
|
|
L<kas_quit(8)>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|