From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <9front-bounces@9front.inri.net>
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.6 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI autolearn=ham
	autolearn_force=no version=3.4.4
Received: from 9front.inri.net (9front.inri.net [168.235.81.73])
	by inbox.vuxu.org (Postfix) with ESMTP id 12426269E9
	for <ml@inbox.vuxu.org>; Thu, 27 Jun 2024 09:18:35 +0200 (CEST)
Received: from mail-43166.protonmail.ch ([185.70.43.166]) by 9front; Thu Jun 27 03:16:53 -0400 2024
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=proton.me;
	s=protonmail; t=1719472609; x=1719731809;
	bh=xVxtzB4AYob29kQjxuRaBY5pa5mSko9X5oTNczE93w4=;
	h=Date:To:From:Subject:Message-ID:Feedback-ID:From:To:Cc:Date:
	 Subject:Reply-To:Feedback-ID:Message-ID:BIMI-Selector;
	b=aJC4sVRLIJ+ay9t4tIV1vwsT1u6e9XSSQsg4LFSeOeUDU+y+VA7vE6oc5XOr/0Rq5
	 QblP7urhnluZo5LR2beMSuOVndLkrI0klbCR/6J4qtlnLtK8JSYni+HdfvW7GsdGK+
	 kqWSlANA5i7VJ9R5TSzuP+GJFDwOtGYI8Pq8zQ1PVbsJTcnoIxIWYdAuZv0YE4TW4J
	 3BxQ+fK+I8oWjQJo8dBHmMmVWhei8IDoCsMzPx61B5ONY0HBQbLhoPIi/WWtKWJvEQ
	 Vhz/JTnCjhENVY44D0hzgg/k54DYA6S+3TnV/DGJ+GvlqUgFFsEQs/zY/r6dqBDhgi
	 916wbIiztKdtw==
Date: Thu, 27 Jun 2024 07:16:46 +0000
To: "9front@9front.org" <9front@9front.org>
From: alex <alex9-ml@proton.me>
Message-ID: <Y6cgoXjnVbDUKhyw2mufiyYff2_3lkP5ITOXtowC8xGYcDscy-gf2Zc72UgYKv09-tUx-UFiKZxedQJyWruOroR5CrLDLNhL0pK4BTGHlig=@proton.me>
Feedback-ID: 112555570:user:proton
X-Pm-Message-ID: 7fdcb14b3c8e2d9ff89785a4082da3f1e5bdc728
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: object-oriented database lifecycle frontend 
Subject: [9front] local auth without cpu service
Reply-To: 9front@9front.org
Precedence: bulk

Hello,=20

I would like to use factotum on my notebook, without running a cpu service =
on it (since it is the only 9front device in my network at the moment).

At the moment I don't understand all the dependencies, but when I understan=
d the fqa correctly, I think it is something like this:

- edit /lib/ndb/local, so the local system will be used as auth (setting "a=
uth" and "authdom" matching to "sys", "ipnet" and "dom")
- setting nvram in plan9.ini (in the fqa it states: "nvram=3D#S/YOURDRIVE/n=
vram", so I've added "nvram=3D#S/sdE1/nvram", but I'm not sure whether it s=
hould read "nvram=3Dlocal!/dev/sdE1/nvram", since "ls #S" is showing glenda=
's home dir and nobootprompt in plan9.ini has the value "local!/dev/sdE1/fs=
cache")
- running auth/wrkey (for making use of the nvram?)
- adding user to the auth server ("auth/keyfs" and "auth/changeuser glenda"=
)
- set up secstored ("mkdir /adm/secstore" and "chmod 770 /adm/secstore")
- start secstored at boot time ("echo auth/secstored > /cfg/$sysname/termrc=
")
- adding glenda to secstore (auth/secstore glenda")
- using secstore with ipso

I can't use ipso ("secstore read failed - bad password?"), but I think, I k=
now why that is.. I've set no secstore password in auth/wrkey, but I've add=
ed glenda to secstore setting a password). Are these steps correct in princ=
iple? Can I redo my first auth/wrkey prompts?

Thank you very much in advance!

Best regards,=20
Alex