mirror of
https://git.openafs.org/openafs.git
synced 2025-01-19 15:30:14 +00:00
af1dbcf0c9
For each command only useful with the Authentication Server, add warnings that the Authentication Server is obsolete and will be removed in a future version of OpenAFS. Encourage people who care to update uss to work with a modern Kerberos KDC, recommend kinit and aklog or klog.krb5 over klog, and warn that klog will be of limited use without an Authentication Server. Change-Id: Idc78ba548134b83ac1eea0fb81a5bc38a431bb38 Reviewed-on: http://gerrit.openafs.org/2052 Reviewed-by: Derrick Brashear <shadow@dementia.org> Tested-by: Derrick Brashear <shadow@dementia.org>
46 lines
1.7 KiB
Plaintext
46 lines
1.7 KiB
Plaintext
=head1 NAME
|
|
|
|
kaserverauxdb - Records failed authentication attempts
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The file F<kaserverauxdb> records failed authentication attempts for the
|
|
local Authentication Server. The server creates it automatically in the
|
|
F</usr/afs/local> directory by default; use the B<-localfiles> argument to
|
|
the B<kaserver> command to specify an alternate directory.
|
|
|
|
The F<kaserverauxdb> file is an internal database used by the
|
|
Authentication Server to prevent access by users who have exceeded the
|
|
limit on failed authentication attempts defined in their Authentication
|
|
Database entry. The Authentication Server refuses further attempts to
|
|
authenticate to an account listed in the database until either an AFS
|
|
system administrator issues the B<kas unlock> command to unlock the
|
|
account, or the timeout period defined in the user's Authentication
|
|
Database entry passes.
|
|
|
|
The F<kaserverauxdb> file is in binary format, so its contents are not
|
|
directly accessible. However, the output from the B<kas examine> command
|
|
reports an account's maximum number of failed attempts, the lockout time,
|
|
and whether the account is currently locked.
|
|
|
|
=head1 CAUTIONS
|
|
|
|
The Authentication Server is obsolete and is provided only for sites that
|
|
need to use it while preparing for a migration to Kerberos KDC. It will be
|
|
removed in a future version of OpenAFS.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<kaserver.DB0(5)>,
|
|
L<kas_examine(8)>,
|
|
L<kas_unlock(8)>,
|
|
L<kaserver(8)>
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|