Re: [9fans] ipso(1) patch

[David Presotto <presotto@closedmind.org>]

On Sun Mar 14 09:17:49 EST 2004, nmh@t3x.org wrote:
> 
> I just put my passwords in a secstore and got the following message
> when running ipso:
> 
> can't dial tcp!$auth!5356
> secstore authentication failed
> secstore read failed - bad password?
> 
> After adding '-s $auth' to the auth/secstore invocation in /rc/bin/ipso,
> everything works fine. However, I guess that ipso is supposed to run
> fine without this modification. Am I missing something?

I find this odd to say the least.  In secstore, the default for -s
is $auth.  Of course, if you didn't have $auth escaped (or quoted)
the shell probably expanded it and you just happen to have the right
server defined in your environment.

If that's the case, then ndb/cs doesn't know where your default auth server
is.  This will bite you in the backside some other time, so you should
fix it.  You can either configure it for your network in /lib/ndb/local,
get it from dhcp, or just cat it onto the end of /net/ndb once you've
done a dhcp.  To get it from dhcp you either have to be running a plan9
dhcp server or configure the response into the dhcp server you are
running.

> 
> Anyway, while looking at ipso, I thought that an option to just fetch
> the factotum keys without displaying them would be nice. So I added the
> '-q' flag which does this.
> 

Looking at your code, it looks like you mean, just load the factotum from
the secstore (or aes) file.  It seems to me that editing and loading factotum
are independent things.  Perhaps they should be separate options.  In general,
I'ld like to load my factotum from the new keys whenever I edit them.
Would anyone mind if I made that the default and added two options instead:

- one to NOT start the editor
- one to NOT load the files

That way the default behavior would be a little more than it currently is,
i.e., edit files and load factotum.