1a9148abdSDoug Rabson.\" Copyright (c) 2008 Isilon Inc http://www.isilon.com/ 2a9148abdSDoug Rabson.\" Authors: Doug Rabson <dfr@rabson.org> 362486687SUlrich Spörlein.\" Developed with Red Inc: Alfred Perlstein <alfred@FreeBSD.org> 4a9148abdSDoug Rabson.\" 5a9148abdSDoug Rabson.\" Redistribution and use in source and binary forms, with or without 6a9148abdSDoug Rabson.\" modification, are permitted provided that the following conditions 7a9148abdSDoug Rabson.\" are met: 8a9148abdSDoug Rabson.\" 1. Redistributions of source code must retain the above copyright 9a9148abdSDoug Rabson.\" notice, this list of conditions and the following disclaimer. 10a9148abdSDoug Rabson.\" 2. Redistributions in binary form must reproduce the above copyright 11a9148abdSDoug Rabson.\" notice, this list of conditions and the following disclaimer in the 12a9148abdSDoug Rabson.\" documentation and/or other materials provided with the distribution. 13a9148abdSDoug Rabson.\" 14a9148abdSDoug Rabson.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15a9148abdSDoug Rabson.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16a9148abdSDoug Rabson.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17a9148abdSDoug Rabson.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18a9148abdSDoug Rabson.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19a9148abdSDoug Rabson.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20a9148abdSDoug Rabson.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21a9148abdSDoug Rabson.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22a9148abdSDoug Rabson.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23a9148abdSDoug Rabson.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24a9148abdSDoug Rabson.\" SUCH DAMAGE. 25a9148abdSDoug Rabson.\" 26a9148abdSDoug Rabson.\" $FreeBSD$ 27a9148abdSDoug Rabson.\" 28*d15f63f2SRick Macklem.Dd June 5, 2013 29a9148abdSDoug Rabson.Dt GSSD 8 30a9148abdSDoug Rabson.Os 31a9148abdSDoug Rabson.Sh NAME 32a9148abdSDoug Rabson.Nm gssd 33a9148abdSDoug Rabson.Nd "Generic Security Services Daemon" 34a9148abdSDoug Rabson.Sh SYNOPSIS 35a9148abdSDoug Rabson.Nm 36a9148abdSDoug Rabson.Op Fl d 37*d15f63f2SRick Macklem.Op Fl v 3809e3247eSRick Macklem.Op Fl s Ar dir-list 3909e3247eSRick Macklem.Op Fl c Ar file-substring 4009e3247eSRick Macklem.Op Fl r Ar preferred-realm 41a9148abdSDoug Rabson.Sh DESCRIPTION 42a9148abdSDoug RabsonThe 43a9148abdSDoug Rabson.Nm 44a9148abdSDoug Rabsonprogram provides support for the kernel GSS-API implementation. 45a9148abdSDoug Rabson.Pp 46a9148abdSDoug RabsonThe options are as follows: 47e1656a88SJoel Dahl.Bl -tag -width indent 48a9148abdSDoug Rabson.It Fl d 49a9148abdSDoug RabsonRun in debug mode. 50a9148abdSDoug RabsonIn this mode, 51a9148abdSDoug Rabson.Nm 52831cbaf1SGiorgos Keramidaswill not fork when it starts. 53*d15f63f2SRick Macklem.It Fl v 54*d15f63f2SRick MacklemRun in verbose mode. 55*d15f63f2SRick MacklemIn this mode, 56*d15f63f2SRick Macklem.Nm 57*d15f63f2SRick Macklemwill log activity messages to syslog using LOG_INFO | LOG_DAEMON or to 58*d15f63f2SRick Macklemstderr, if the 59*d15f63f2SRick Macklem.Fl d 60*d15f63f2SRick Macklemoption has also been specified. 61*d15f63f2SRick MacklemThe minor status is logged as a decimal number, since it is actually a 62*d15f63f2SRick MacklemKerberos return status, which is signed. 6309e3247eSRick Macklem.It Fl s Ar dir-list 6409e3247eSRick MacklemLook for an appropriate credential cache file in this list of directories. 6509e3247eSRick MacklemThe list should be full pathnames from root, separated by ':' characters. 6609e3247eSRick MacklemUsually this list will simply be "/tmp". 67e8ab2920SBenjamin KadukWithout this option, 6809e3247eSRick Macklem.Nm 69e8ab2920SBenjamin Kadukassumes that the credential cache file is called /tmp/krb5cc_<uid>, 7009e3247eSRick Macklemwhere <uid> is the effective uid for the RPC caller. 7109e3247eSRick Macklem.It Fl c Ar file-substring 7209e3247eSRick MacklemSet a file-substring for the credential cache file names. 7309e3247eSRick MacklemOnly files with this substring embedded in their names will be 74e8ab2920SBenjamin Kadukselected as candidates when 7509e3247eSRick Macklem.Fl s 7609e3247eSRick Macklemhas been specified. 7709e3247eSRick MacklemIf not specified, it defaults to "krb5cc_". 7809e3247eSRick Macklem.It Fl r Ar preferred-realm 79e8ab2920SBenjamin KadukUse Kerberos credentials for this realm when searching for 80e8ab2920SBenjamin Kadukcredentials in directories specified with 81e8ab2920SBenjamin Kaduk.Fl s . 82e8ab2920SBenjamin KadukIf not specified, the default Kerberos realm will be used. 83a9148abdSDoug Rabson.El 84a9148abdSDoug Rabson.Sh FILES 85a9148abdSDoug Rabson.Bl -tag -width ".Pa /etc/krb5.keytab" -compact 86a9148abdSDoug Rabson.It Pa /etc/krb5.keytab 87a9148abdSDoug RabsonContains Kerberos service principals which may be used as credentials 88a9148abdSDoug Rabsonby kernel GSS-API services. 89a9148abdSDoug Rabson.El 90a9148abdSDoug Rabson.Sh EXIT STATUS 91a9148abdSDoug Rabson.Ex -std 92a9148abdSDoug Rabson.Sh SEE ALSO 93*d15f63f2SRick Macklem.Xr gssapi 3 , 94*d15f63f2SRick Macklem.Xr syslog 3 95a9148abdSDoug Rabson.Sh HISTORY 96a9148abdSDoug RabsonThe 97a9148abdSDoug Rabson.Nm 98831cbaf1SGiorgos Keramidasmanual page first appeared in 99a9148abdSDoug Rabson.Fx 8.0 . 100a9148abdSDoug Rabson.Sh AUTHORS 101a9148abdSDoug RabsonThis 102a9148abdSDoug Rabsonmanual page was written by 103a9148abdSDoug Rabson.An Doug Rabson Aq dfr@FreeBSD.org . 104