openafs/doc/html/AdminReference/auarf241.htm

130 lines
7.5 KiB
HTML
Raw Normal View History

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 4//EN">
<HTML><HEAD>
<TITLE>Administration Reference</TITLE>
<!-- Begin Header Records ========================================== -->
<!-- /tmp/idwt3672/auarf000.scr converted by idb2h R4.2 (359) ID -->
<!-- Workbench Version (AIX) on 3 Oct 2000 at 16:18:30 -->
<META HTTP-EQUIV="updated" CONTENT="Tue, 03 Oct 2000 16:18:29">
<META HTTP-EQUIV="review" CONTENT="Wed, 03 Oct 2001 16:18:29">
<META HTTP-EQUIV="expires" CONTENT="Thu, 03 Oct 2002 16:18:29">
</HEAD><BODY>
<!-- (C) IBM Corporation 2000. All Rights Reserved -->
<BODY bgcolor="ffffff">
<!-- End Header Records ============================================ -->
<A NAME="Top_Of_Page"></A>
<H1>Administration Reference</H1>
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf240.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Bot_Of_Page"><IMG SRC="../bot.gif" BORDER="0" ALT="[Bottom of Topic]"></A> <A HREF="auarf242.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
<P>
<H2><A NAME="HDRUPSERVER" HREF="auarf002.htm#ToC_255">upserver</A></H2>
<A NAME="IDX5502"></A>
<A NAME="IDX5503"></A>
<A NAME="IDX5504"></A>
<A NAME="IDX5505"></A>
<A NAME="IDX5506"></A>
<A NAME="IDX5507"></A>
<P><STRONG>Purpose</STRONG>
<P>Initializes the server portion of the Update Server
<P><STRONG>Synopsis</STRONG>
<PRE><B>upserver</B> [&lt;<VAR>directory</VAR>><SUP>+</SUP>] [<B>-crypt</B> &lt;<VAR>directory</VAR>><SUP>+</SUP>] [<B>-clear</B> &lt;<VAR>directory</VAR>><SUP>+</SUP>]
[<B>-auth</B> &lt;<VAR>directory</VAR>><SUP>+</SUP>] [<B>-help</B>]
</PRE>
<P>This command does not use the syntax conventions of the AFS command
suites. Provide the command name and all option names in full.
<P><STRONG>Description</STRONG>
<P>The <B>upserver</B> command initializes the server portion of the
Update Server (the <B>upserver</B> process). In the conventional
configuration, its binary file is located in the <B>/usr/afs/bin</B>
directory on a file server machine.
<P>The <B>upserver</B> command is not normally issued at the command shell
prompt but rather placed into a file server machine's
<B>/usr/afs/local/BosConfig</B> file with the <B>bos create</B>
command. If it is ever issued at the command shell prompt, the issuer
must be logged onto a database server machine as the local superuser
<B>root</B>.
<P>The <B>upserver</B> command specifies which of the directories on the
local disk are eligible for distribution in response to requests from the
client portion of the Update Server (the <B>upclient</B> process) running
on other machines. If no directories are specified, the
<B>upserver</B> process distributes the contents of any directory on its
local disk.
<P>The <B>upserver</B> process can distribute a directory's contents
in encrypted or unencrypted form. By default, it does not use
encryption unless an <B>upclient</B> process requests it (this default is
equivalent to setting the <B>-clear</B> flag). When the
<B>-crypt</B> flag is provided, the <B>upserver</B> process only
fulfills requests for encrypted transfer.
<P>For the United States edition of AFS, using the <B>-crypt</B> flag
guarantees that the <B>upserver</B> process transfers a directory's
contents only in encrypted form. For the international edition, using
the <B>-crypt</B> flag completely blocks data transfer, because the
international edition of the <B>upclient</B> process cannot request
encrypted transfer (the <B>upclient</B> initialization command does not
include the <B>-crypt</B> flag).
<P>The <B>upclient</B> and <B>upserver</B> processes always mutually
authenticate, whether or not the data they pass is encrypted; they use
the key with the highest key version number in the
<B>/usr/afs/etc/KeyFile</B> file to construct a server ticket for mutual
authentication.
<P><STRONG>Cautions</STRONG>
<P>Do not use the Update Server to distribute the contents of the
<B>/usr/afs/etc</B> directory if using the international edition of
AFS. The contents of this directory are sensitive and the international
edition of AFS does not include the encryption routines necessary for
encrypting files before transfer across the network.
<P><STRONG>Options</STRONG>
<DL>
<P><DT><B><VAR>directory</VAR>
</B><DD>Names each directory to distribute in unencrypted form (because they
appear before the first <B>-crypt</B> or <B>-clear</B> flag on the
command line). If this argument is omitted, all directories on the
machine's local disk are eligible for distribution.
<P><DT><B>-crypt
</B><DD>Precedes a list of one or more directories that the <B>upserver</B>
process distributes only in encrypted form.
<P><DT><B>-clear
</B><DD>Precedes a list of one or more directories that the <B>upserver</B>
process distributes in unencrypted form unless the <B>upclient</B> process
requests them in encrypted form. Use this argument only if a list of
directories headed by the <B>-crypt</B> flag precedes it on the command
line.
<P><DT><B>-auth
</B><DD>Precedes a list of one or more directories which the <B>upserver</B>
process distributes using a form of encryption that is intermediate in
complexity and security between the unencrypted and encrypted levels set by
the <B>-clear</B> and <B>-crypt</B> arguments. Do not use this
argument, because the <B>upclient</B> process does not have a
corresponding argument that it can use to request data transfer at this
level.
<P><DT><B>-help
</B><DD>Prints the online help for this command. All other valid options
are ignored.
</DL>
<P><STRONG>Examples</STRONG>
<P>The following example <B>bos create</B> command defines and starts an
<B>upserver</B> process on the host machine
<B>fs1.abc.com</B>. The last parameter (enclosed in
quotes) instructs the <B>upserver</B> process to distribute the contents
of the <B>/usr/afs/bin</B> directory in unencrypted form and the contents
of the <B>/usr/afs/etc</B> directory in encrypted form.
<PRE> % <B>bos create -server fs1.abc.com -instance upserver -type simple</B> \
<B>-cmd "/usr/afs/bin/upserver /usr/afs/bin -crypt /usr/afs/etc"</B>
</PRE>
<P><STRONG>Privilege Required</STRONG>
<P>The issuer must be logged in as the superuser <B>root</B> on a file
server machine to issue the command at a command shell prompt. It is
conventional instead to create and start the process by issuing the <B>bos
create</B> command.
<P><STRONG>Related Information</STRONG>
<P><A HREF="auarf016.htm#HDRBOSCONFIG">BosConfig</A>
<P><A HREF="auarf098.htm#HDRBOS_CREATE">bos create</A>
<P><A HREF="auarf240.htm#HDRUPCLIENT">upclient</A>
<P>
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf240.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Top_Of_Page"><IMG SRC="../top.gif" BORDER="0" ALT="[Top of Topic]"></A> <A HREF="auarf242.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
<!-- Begin Footer Records ========================================== -->
<P><HR><B>
<br>&#169; <A HREF="http://www.ibm.com/">IBM Corporation 2000.</A> All Rights Reserved
</B>
<!-- End Footer Records ============================================ -->
<A NAME="Bot_Of_Page"></A>
</BODY></HTML>