jimzah/openafs
1
0
Fork 0
mirror of https://git.openafs.org/openafs.git synced 2025-01-18 23:10:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
736364f1e3
openafs/doc/man-pages/pod8
History
Benjamin Kaduk 736364f1e3 OPENAFS-SA-2018-001 butc: require authenticated connections with -localauth 
The butc -localauth option is available to use the cell-wide key to
authenticate to the vlserver and buserver, which in normal deployments
will require incoming connections to be authenticated as a superuser.
In such cases, the cell-wide key is also available for use in
authenticating incoming connections to the butc, which would otherwise
have been completely unauthenticated.

Because of the security hazards of allowing unauthenticaed inbound
RPCs, especially ones that manipulate backup information and are allowed
to initiate outboud RPCs authenticated as the superuser, default to
not allowing unauthenticated inbound RPCs at all.  Provide an opt-out
command-line argument for deployments that require this functionality
and have configured their network environment (firewall/etc.) appropriately.

Change-Id: Ia6349757a4c6d59d1853df1a844e210d32c14feb
2018-09-09 17:35:29 -05:00
..
fragments volser: preserve volume stats by default 2017-08-02 20:28:23 -04:00
.gitignore document dasalvager 2010-07-18 09:46:48 -07:00
afsd.pod doc: Edits to the 'afsd -volume-ttl' manpage 2018-02-15 22:16:00 -05:00
akeyconvert.pod Add akeyconvert, for rxkad.keytab to KeyFileExt conversion 2016-04-28 19:24:09 -04:00
aklog_dynamic_auth.pod doc: Add aklog_dynamic_auth manpage 2011-05-15 06:15:43 -07:00
asetkey.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
backup_adddump.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_addhost.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_addvolentry.pod doc: quote list items in POD 2013-05-01 13:58:56 -07:00
backup_addvolset.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_apropos.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_dbverify.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_deldump.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_deletedump.pod doc: backup manpage fix 2015-02-03 13:50:32 -05:00
backup_delhost.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_delvolentry.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_delvolset.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_diskrestore.pod doc: backup manpage fixes 2013-11-07 04:21:42 -08:00
backup_dump.pod doc: backup manpage fixes 2013-11-07 04:21:42 -08:00
backup_dumpinfo.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_help.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_interactive.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_jobs.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_kill.pod doc: fix some broken link specifications 2011-06-22 11:01:09 -07:00
backup_labeltape.pod doc: fix some broken link specifications 2011-06-22 11:01:09 -07:00
backup_listdumps.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_listhosts.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_listvolsets.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_quit.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
backup_readlabel.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_restoredb.pod Remove references to IBM AFS 2010-05-26 12:05:45 -07:00
backup_savedb.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_scantape.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
backup_setexp.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_status.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_volinfo.pod Update backup suite manpages 2009-10-08 15:40:35 -07:00
backup_volrestore.pod doc: backup manpage fixes 2013-11-07 04:21:42 -08:00
backup_volsetrestore.pod doc: backup manpage fixes 2013-11-07 04:21:42 -08:00
backup.pod doc: document the version subcommand 2015-11-12 11:29:37 -05:00
bos_addhost.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_addkey.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_adduser.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_apropos.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
bos_create.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_delete.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_exec.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
bos_getdate.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_getlog.pod doc: add the PtLog man page 2016-12-22 17:21:50 -05:00
bos_getrestart.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_getrestricted.pod doc: improve man pages related to bos restricted mode 2014-03-11 06:26:42 -07:00
bos_help.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
bos_install.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_listhosts.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_listkeys.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_listusers.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_prune.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_removehost.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_removekey.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_removeuser.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_restart.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_salvage.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_setauth.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_setcellname.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_setrestart.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_setrestricted.pod doc: bos setrestricted -mode 0 does make sense 2014-03-26 14:00:35 -07:00
bos_shutdown.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_start.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_startup.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_status.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_stop.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_uninstall.pod Document KeyFileExt(5) 2015-08-27 22:31:44 -04:00
bos_util.pod spelling/grammar fixes for manpages 2011-02-03 12:29:34 -08:00
bos.pod doc: document the version subcommand 2015-11-12 11:29:37 -05:00
bosserver.pod externalize log rotation 2016-04-26 19:34:59 -04:00
buserver.pod doc: buserver manpage fixes 2013-11-04 03:55:54 -08:00
butc.pod OPENAFS-SA-2018-001 butc: require authenticated connections with -localauth 2018-09-09 17:35:29 -05:00
dafileserver.pod.in viced: make -vhashsize usable for non-DAFS 2016-07-05 19:04:33 -04:00
dasalvager.pod.in document dasalvager 2010-07-18 09:46:48 -07:00
davolserver.pod.in doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
fileserver.pod.in doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
fms.pod Remove references to IBM AFS 2010-05-26 12:05:45 -07:00
fssync-debug_attach.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_callback.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_detach.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_error.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_header.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_leaveoff.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_list.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_mode.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_move.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_offline.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_online.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_query.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_stats.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vgcadd.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vgcdel.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vgcquery.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vgcscan.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vgcscanall.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_vnode.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug_volop.pod doc: Add -help option to fssync-debug manpages 2013-11-04 04:07:38 -08:00
fssync-debug.pod Link dafssync-debug(8) to fssync-debug(8) 2010-09-23 02:22:44 -07:00
fstrace_apropos.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace_clear.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace_dump.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace_help.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
fstrace_lslog.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace_lsset.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
fstrace_setlog.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace_setset.pod Update fstrace suite manpages 2009-10-08 15:28:56 -07:00
fstrace.pod Remove references to IBM AFS 2010-05-26 12:05:45 -07:00
ka-forwarder.pod doc: fix typo on ka-forwarder man page 2014-03-06 12:52:30 -08:00
kadb_check.pod doc: fix some broken link specifications 2011-06-22 11:01:09 -07:00
kas_apropos.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_create.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_delete.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_examine.pod spelling/grammar fixes for manpages 2011-02-03 12:29:34 -08:00
kas_forgetticket.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_help.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_interactive.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
kas_list.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_listtickets.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
kas_noauthentication.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_quit.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas_setfields.pod spelling/grammar fixes for manpages 2011-02-03 12:29:34 -08:00
kas_setpassword.pod Remove references to IBM AFS 2010-05-26 12:05:45 -07:00
kas_statistics.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
kas_stringtokey.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
kas_unlock.pod man-page-name-underscore-20071111 2007-11-11 22:54:56 +00:00
kas.pod doc: document the version subcommand 2015-11-12 11:29:37 -05:00
kaserver.pod doc: kaserver manpage fixes 2013-11-04 04:04:04 -08:00
kdb.pod doc: kdb manpage fixes 2013-11-04 11:58:10 -08:00
kpwvalid.pod doc: fix some broken link specifications 2011-06-22 11:01:09 -07:00
prdb_check.pod doc: fix some broken link specifications 2011-06-22 11:01:09 -07:00
pt_util.pod doc: remove supergroup caution from pt_util 2015-09-13 03:16:45 -04:00
ptserver.pod doc: add the PtLog man page 2016-12-22 17:21:50 -05:00
read_tape.pod Move restorevol to bin from sbin 2009-09-09 21:22:34 -07:00
rmtsysd.pod man-page-rmtsysd-20090518 2009-05-18 21:22:04 +00:00
salvager.pod.in document dasalvager 2010-07-18 09:46:48 -07:00
salvageserver.pod dafs: remove the salvageserver -showlog option 2015-12-02 23:52:07 -05:00
state_analyzer.pod Minor state_analyzer manpage corrections 2010-03-29 08:04:42 -07:00
upclient.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
upserver.pod doc: upserver manpage fixes 2013-11-04 09:34:08 -08:00
uss_add.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
uss_apropos.pod More deprecations noted. 2010-11-27 22:40:07 -08:00
uss_bulk.pod More deprecations noted. 2010-11-27 22:40:07 -08:00
uss_delete.pod doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
uss_help.pod More deprecations noted. 2010-11-27 22:40:07 -08:00
uss.pod More deprecations noted. 2010-11-27 22:40:07 -08:00
vldb_check.pod doc: vldb_check manpage fixes 2013-11-04 09:34:19 -08:00
vldb_convert.pod doc: vldb_check manpage fixes 2013-11-04 09:34:19 -08:00
vlserver.pod externalize log rotation 2016-04-26 19:34:59 -04:00
voldump.pod doc: voldump manpage fixes 2013-11-04 04:03:54 -08:00
volinfo.pod doc: volscan man page 2014-03-25 09:59:10 -07:00
volscan.pod volscan: fix copyright and licence notice 2014-08-13 12:06:38 -04:00
volserver.pod.in doc: replace hostnames with IETF example hostnames 2012-02-17 20:51:58 -08:00
vsys.pod man-page-vsys-20090518 2009-05-18 21:28:26 +00:00
xfs_size_check.pod pretty-html-synopsis-20060228 2006-03-01 05:02:29 +00:00