Didier : /* Location of the configuration file */

2012-12-13T14:23:12Z

Location of the configuration file

← Version précédente		Version du 13 décembre 2012 à 14:23
Ligne 245 :		Ligne 245 :
	== Location of the configuration file ==		== Location of the configuration file ==

	By default, pam_usb.so and its tools will look for the configuration file at `/etc/pamusb.conf`.		By default, pam_usb.so and its tools will look for the configuration file at <path>/etc/pamusb.conf</path>.

	If you want to use a different location, you will have to use the `-c` flag.		If you want to use a different location, you will have to use the <tt>-c</tt> flag.

	File <path>/etc/pam.d/common-auth</path>		File <path>/etc/pam.d/common-auth</path>
Ligne 253 :		Ligne 253 :
	auth required pam_unix.so nullok_secure		auth required pam_unix.so nullok_secure

	You will also have to use the -c option when calling pam_usb's tools.		You will also have to use the <tt>-c</tt> option when calling pam_usb's tools.

	pamusb-agent -c /some/other/path.conf		pamusb-agent -c /some/other/path.conf

Didier : Page créée avec « = Configuration file reference = The configuration file is formatted in XML and subdivided in 4 sections: * Default options, shared among every device, user and service * D... »

2012-12-13T14:07:31Z

Page créée avec « = Configuration file reference = The configuration file is formatted in XML and subdivided in 4 sections: * Default options, shared among every device, user and service * D... »

Nouvelle page

= Configuration file reference =

The configuration file is formatted in XML and subdivided in 4 sections:

* Default options, shared among every device, user and service
* Devices declaration and settings
* Users declaration and settings
* Services declaration and settings

The syntax is the following:

<syntaxhighlight lang="xml">
<configuration>
<defaults>

</defaults>

<devices>

</devices>

<users>

</users>

<services>

</services>
</configuration>
</syntaxhighlight>

== Options ==

{| class="wikitable"
!Name
!Type
!Default
!Description
|-
|enable
|Boolean
|true
|Enable pam_usb
|-
|debug
|Boolean
|false
|Enable debug messages
|-
|quiet
|Boolean
|false
|Quiet mode
|-
|color_log
|Boolean
|true
|Enable colored output
|-
|one_time_pad
|Boolean
|true
|Enable the use of one time pads
|-
|deny_remote
|Boolean
|true
|Deny access from remote host (ssh)
|-
|probe_timeout
|Time
|10s
|Time to wait for the volume to be detected
|-
|pad_expiration
|Time
|1h
|Time between pads regeneration
|-
|hostname
|String
|Computer's hostname
|Must be unique accross computers using the same device
|-
|system_pad_directory
|String
|.pamusb
|Relative path to the user's home used to store one time pads
|-
|device_pad_directory
|String
|.pamusb
|Relative path to the device used to store one time pads
|}

Example:

<syntaxhighlight lang="xml">
<configuration>
<defaults>

<option name="color_log">false</option>

<option name="debug">true</option>
</defaults>

<users>
<user id="root">

<option name="color_log">true</option>
</user>

<user id="scox">

<option name="debug">false</option>
</user>
</users>

<devices>
<device id="mydevice">

<option name="probe_timeout">15</option>
</device>
</devices>

<services>
<service id="su">

<option name="enable">false<option>
</service>
</services>
</configuration>
</syntaxhighlight>

== Devices ==

{| class="wikitable"
!Name
!Type
!Description
!Example
|-
|id
|Attribute
|Arbitrary device name
|MyDevice
|-
|vendor
|Element
|device's vendor name
|SanDisk Corp.
|-
|model
|Element
|device's model name
|Cruzer Titanium
|-
|serial
|Element
|serial number of the device
|SNDKXXXXXXXXXXXXXXXX
|-
|volume_uuid
|Element
|UUID of the device's volume used to store pads
|6F6B-42FC
|}

Example:

<syntaxhighlight lang="xml">
<device id="MyDevice">
<vendor>SanDisk Corp.</vendor>
<model>Cruzer Titanium</model>
<serial>SNDKXXXXXXXXXXXXXXXX</serial>
<volume_uuid>6F6B-42FC</volume_uuid>
</device>
</syntaxhighlight>

== Users ==

{| class="wikitable"
!Name
!Type
!Description
!Example
|-
|id
|Attribute
|Login of the user
|root
|-
|device
|Element
|id of the device associated to the user
|MyDevice
|-
|agent
|Element
|Agent commands, for use with pamusb-agent
|}

Example:

<syntaxhighlight lang="xml">
<user id="scox">
<device>MyDevice</device>


<agent event="lock">gnome-screensaver-command --lock</agent>
<agent event="lock">beep-media-player --pause</agent>


<agent event="unlock">gnome-screensaver-command --deactivate</agent>
<agent event="unlock">beep-media-player --play</agent>
</user>
</syntaxhighlight>

== Services ==

{| class="wikitable"
! Name
! Type
! Description
! Example
|-
| id
| Attribute
| Name of the service
| su
|}

Example:

<syntaxhighlight lang="xml">
<service id="su">

</service>
</syntaxhighlight>

== Location of the configuration file ==

By default, pam_usb.so and its tools will look for the configuration file at `/etc/pamusb.conf`.

If you want to use a different location, you will have to use the `-c` flag.

File <path>/etc/pam.d/common-auth</path>
auth sufficient pam_usb.so -c /some/other/path.conf
auth required pam_unix.so nullok_secure

You will also have to use the -c option when calling pam_usb's tools.

pamusb-agent -c /some/other/path.conf

Security/PamUsb/ConfigurationFile - Historique des versions

Didier : /* Location of the configuration file */

Didier : Page créée avec « = Configuration file reference = The configuration file is formatted in XML and subdivided in 4 sections: * Default options, shared among every device, user and service * D... »

Didier : /* Location of the configuration file */

Didier : Page créée avec « = Configuration file reference = The configuration file is formatted in XML and subdivided in 4 sections: * Default options, shared among every device, user and service * D... »