Linux Certif

Toute la documentation sur la certification Linux LPI

nutcpc

NAME

nutcpc - NUFW console-mode client for GNU/Linux and BSD systems

SYNOPSIS

nutcpc [ -d ] [ -l ] [ -k ] [ -V ] [ -h ] [ -q ] [ -H Nuauth IP ] [ -p Nuauth port ] [ -U UserID ] [ -P UserPassword ] [ -I Interval ] [ -C CertFile ] [ -A AuthorityFile ] [ -K KeyFile ] [ -W CertPass ] [ -a NuauthDN ]

DESCRIPTION

This manual page documents the nutcpc command.

nutcpc is a console-mode client for the NUFW authenticating firewall. It sends authentication packets to the nuauth server.

Original packaging and informations and help can be found from http://www.nufw.org/

OPTIONS

-d

Debug mode, don't go into background.

-l

Do not verify whether lock file exists before starting. And do not create lock file.

-k

Before starting, kill existing instances of the program running on our local userID.

-V

Issues program version and exits.

-h

Issues usage details and exits.

-q

So not display running nutcpc options on "ps"

-H Nuauth IP

Send authentication packet to Nuauth IP.

-p Nuauth port

Send authentication packet to Nuauth port.

-U User ID

Set nufw userid to User ID.

-P User Password

Set nufw password to User Password.

-I Interval

Set refresh interval to Interval.

-C CertFile

Use certificate file stored in the file CertFile to negotiate the TLS connection to nuauth.

-A AuthorityFile

Use authority file stored in AuthorityFile and check the validity of nuauth certificate against this authority. Nutcpc will leave if this is not the case.

-K KeyFile

Use key file stored in the file KeyFile to negotiate the TLS connection to nuauth.

-W CertPass

Use the passphrase CertPass to decrypt the certificate.

-a NuauthDN

Verify that the certificate given by nuauth has a DN equal to NuauthDN. Nutcpc will leave if this is not the case.

LOCK FILE

By default, the lock file set by nutcpc is at ~/.nufw/nutcpc

CERTIFICATE AUTHENTICATION

User authentication can be done using a certificate and a private key. Such a method will be used, if nutcpc can find a certificate at ~/.nufw/cert.pem and the corresponding privat key at ~/.nufw/key.pem. The server identity will be checked if a CA certificate is provided in ~/.nufw/cacert.pem .

SIGNALS

HUP

When receiving this signal, nutcpc attempts to immediately reconnect to the server, if disconnected. The signal is ignored in other cases.

SEE ALSO

nufw(8)

nuauth(8)

AUTHOR

Nuauth was designed and coded by Eric Leblond, aka Regit (<eric@regit.org>) , and Vincent Deffontaines, aka gryzor (<vincent@gryzor.com>). Original idea in 2001, while working on NSM Ldap support.

This manual page was written by Eric Leblond

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 2 as published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts and no Back-Cover Texts.