Re: [9fans] secstore passwords question

[David Presotto <presotto@closedmind.org>]

[-- Attachment #1: Type: text/plain, Size: 254 bytes --]

depends on how many machines you have.  If secstored is running on a different
machine, then factotum will call it up when it starts and download the
keys.  Otherwise, you can start secstore some time later and redirect its
output to the factotum/ctl.

[-- Attachment #2: Type: message/rfc822, Size: 3020 bytes --]

From: andrey mirtchovski <mirtchov@cpsc.ucalgary.ca>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] secstore passwords question
Date: Sat, 26 Jul 2003 19:53:26 -0600 (MDT)
Message-ID: <Pine.LNX.4.44.0307261947420.17380-100000@fbsd.cpsc.ucalgary.ca>

Another question, of the dumb variety:

to enable ssh logins to the system I need to do an:

	aux/rsagen -t 'service=sshnet' > /mnt/factotum/ctl

however the factotum is compiled in the kernel of the auth server and is
started from the boot script in /sys/lib/sysconfig/authsrv/...

at this point there's not secstore running so there's no way to tell
factotum what the rsagen key for the machine is, so we end up with an
unusable ssh server.

should secstore be compiled in the kernel and started right before factotum
during the boot sequence (taking the secstore key from nvram)?

or am I missing something embarrassingly trivial again?

andrey

On Sat, 26 Jul 2003, David Presotto wrote:

> auth/secstore -c  changes a password.  man secstore