mirror of
https://git.openafs.org/openafs.git
synced 2025-01-31 21:47:45 +00:00
d053825374
This is the initial conversion of the AFS Adminstrators Reference into POD for use as man pages. The man pages are now generated via pod2man from regen.sh so that only those working from CVS have to have pod2man available. The Makefile only installs. The pages have also been sorted out into pod1, pod5, and pod8 directories, making conversion to the right section of man page easier without maintaining a separate list and allowing for names to be duplicated between pod5 and pod1 or pod8 (which will likely be needed in a few cases). This reconversion is done with a new script based on work by Chas Williams. In some cases, the output is worse than the previous POD pages, but this is a more comprehensive conversion. This is only the first step, and this initial conversion has various problems. In addition, the file man pages that didn't have simple names have not been converted in this pass and will be added later. Some of the man pages have syntax problems and all of them have formatting errors. The next editing pass, coming shortly, will clean up most of the remaining mess. (cherry picked from commit e3dfba8e6c10c296c09e9b0ac0c0355658ce0be7)
160 lines
4.9 KiB
Plaintext
160 lines
4.9 KiB
Plaintext
=head1 NAME
|
|
|
|
kas interactive - Enters interactive mode
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
B<kas interactive> [-admin_username <I<admin principal to use for authentication>>]
|
|
[B<-password_for_admin> <I<admin password>>] [B<-cell> <I<cell name>>]
|
|
[-servers <I<explicit list of authentication servers>>+]
|
|
[B<-noauth>] [-help]
|
|
|
|
B<kas i> [-a <I<admin principal to use for authentication>>]
|
|
[B<-p> <I<admin password>>] [B<-c> <I<cell name>>]
|
|
[B<-s> <I<explicit list of authentication servers>>+] [B<-n>] [-h]
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The kas interactive command establishes an interactive session
|
|
for the issuer of the command. By default, the command interpreter
|
|
establishes an authenticated connection for the user logged into the local
|
|
file system with all of the Authentication Servers listed in the local
|
|
B</usr/vice/etc/CellServDB> file for the cell named in the local
|
|
B</usr/vice/etc/ThisCell> file. To specify an alternate
|
|
identity, cell name, or list of Authentication Servers, include the
|
|
B<-admin_username>, B<-cell>, or B<-servers> arguments
|
|
respectively. Interactive mode lasts for six hours unless the maximum
|
|
ticket lifetime for the issuer or the Authentication Server's Ticket
|
|
Granting Service is shorter.
|
|
|
|
There are two other ways to enter interactive mode, in addition to the
|
|
B<kas interactive> command:
|
|
|
|
=item *
|
|
|
|
Type the kas command at the shell prompt without any operation
|
|
code. If appropriate, include one or more of the
|
|
B<-admin_username>, B<-password_for_admin>, B<-cell>,
|
|
and B<-servers> arguments.
|
|
|
|
|
|
=item *
|
|
|
|
Type the kas command followed by a user name and cell name,
|
|
separated by an B<@> sign (for example: B<kas
|
|
admin@abc.com>), to establish a connection under the specified
|
|
identity with the Authentication Servers listed in the local
|
|
B</usr/vice/etc/CellServDB> file for the indicated cell. If
|
|
appropriate, provide the B<-servers> argument to specify an alternate
|
|
list of Authentication Server machines that belong to the indicated
|
|
cell.
|
|
|
|
|
|
There are several consequences of entering interactive mode:
|
|
|
|
=over 4
|
|
|
|
=item *
|
|
|
|
The C<ka>> prompt replaces the system (shell) prompt. When
|
|
typing commands at this prompt, provide only the operation code (omit the
|
|
command suite name, B<kas>).
|
|
|
|
|
|
=item *
|
|
|
|
The command interpreter does not prompt for the issuer's
|
|
password.
|
|
|
|
|
|
The issuer's identity and password, the relevant cell, and the set of
|
|
Authentication Server machines specified when entering interactive mode apply
|
|
to all commands issued during the session. They cannot be changed
|
|
without leaving the session, except by using the B<(kas)
|
|
noauthentication> command to replace the current authenticated
|
|
connections with unauthenticated ones. The B<-admin_username>,
|
|
B<-password_for_admin>, B<-cell>, and B<-servers>
|
|
arguments are ignored if provided on a command issued during interactive
|
|
mode.
|
|
|
|
=back
|
|
|
|
To establish an unauthenticated connection to the Authentication Server,
|
|
include the B<-noauth> flag or provide an incorrect password.
|
|
Unless authorization checking is disabled on each Authentication Server
|
|
machine involved, however, it is not possible to perform any privileged
|
|
operations within such a session.
|
|
|
|
To end the current authenticated connection and establish an
|
|
unauthenticated one, issue the B<(kas) noauthentication>
|
|
command. To leave interactive mode and return to the regular shell
|
|
prompt, issue the B<(kas) quit> command.
|
|
|
|
=head1 OPTIONS
|
|
|
|
=over 4
|
|
|
|
=item -admin_username
|
|
|
|
Specifies the user identity under which to authenticate with the
|
|
Authentication Server for execution of the command. For more details,
|
|
see the introductory B<kas> reference page.
|
|
|
|
=item -password_for_admin
|
|
|
|
Specifies the password of the command's issuer. If it is
|
|
omitted (as recommended), the B<kas> command interpreter prompts for
|
|
it and does not echo it visibly. For more details, see the introductory
|
|
B<kas> reference page.
|
|
|
|
=item -cell
|
|
|
|
Names the cell in which to run the command. For more details, see
|
|
the introductory B<kas> reference page.
|
|
|
|
=item -servers
|
|
|
|
Names each machine running an Authentication Server with which to
|
|
establish a connection. For more details, see the introductory
|
|
B<kas> reference page.
|
|
|
|
=item -noauth
|
|
|
|
Assigns the unprivileged identity anonymous to the
|
|
issuer. For more details, see the introductory B<kas> reference
|
|
page.
|
|
|
|
=item -help
|
|
|
|
Prints the online help for this command. All other valid options
|
|
are ignored.
|
|
|
|
=back
|
|
|
|
=head1 EXAMPLES
|
|
|
|
The following example shows a user entering interactive mode as the
|
|
privileged user B<admin>.
|
|
|
|
% kas interactive admin
|
|
Password for admin: I<admin_password>
|
|
ka>
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
None
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<kas(1)>,
|
|
L<kas_noauthentication(1)>,
|
|
L<kas_quit(1)>
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|