munge(1) - f14

1
2MUNGE(1)                  MUNGE Uid 'N' Gid Emporium                  MUNGE(1)
3
4
5

NAME

7       munge - MUNGE credential encoder
8
9

SYNOPSIS

11       munge [OPTION]...
12
13

DESCRIPTION

15       The  munge  program  creates an MUNGE credential containing the UID and
16       GID of the calling process.  Additional payload data  can  be  encapsu‐
17       lated  in  as  well.   The returned credential can be passed to another
18       process which can validate its contents (e.g.,  via  the  unmunge  pro‐
19       gram).   This  allows  an  unrelated  and potentially remote process to
20       ascertain the identity of the calling process.
21
22       By default, payload input is read from  stdin  and  the  credential  is
23       written to stdout.
24
25

OPTIONS

27       -h, --help
28              Display a summary of the command-line options.
29
30       -L, --license
31              Display license information.
32
33       -V, --version
34              Display version information.
35
36       -n, --no-input
37              Discard all input for the payload.
38
39       -s, --string string
40              Input payload from the specified string.
41
42       -i, --input file
43              Input payload from the specified file.
44
45       -o, --output file
46              Output the credential to the specified file.
47
48       -c, --cipher string
49              Specify the cipher type, either by name or number.
50
51       -C, --list-ciphers
52              Display a list of supported cipher types.
53
54       -m, --mac string
55              Specify the MAC type, either by name or number.
56
57       -M, --list-macs
58              Display a list of supported MAC types.
59
60       -z, --zip string
61              Specify the compression type, either by name or number.
62
63       -Z, --list-zips
64              Display a list of supported compression types.
65
66       -u, --restrict-uid uid
67              Specify  the  user name or UID allowed to decode the credential.
68              This will be matched  against  the  effective  user  ID  of  the
69              process requesting the credential decode.
70
71       -g, --restrict-gid gid
72              Specify  the group name or GID allowed to decode the credential.
73              This will be matched against  the  effective  group  ID  of  the
74              process  requesting  the credential decode, as well as each sup‐
75              plementary group of which the effective user ID of that  process
76              is a member.
77
78       -t, --ttl integer
79              Specify  the  time-to-live (in seconds).  This controls how long
80              the credential is valid once it has been encoded.  A value of  0
81              selects  the  default  TTL.   A  value of -1 selects the maximum
82              allowed TTL.
83
84       -S, --socket path
85              Specify the local domain socket for connecting with munged.
86
87

EXIT STATUS

89       The munge program returns a zero exit code when the credential is  suc‐
90       cessfully  created  and returned.  On error, it prints an error message
91       to stderr and returns a non-zero exit code.
92
93

AUTHOR

95       Chris Dunlap <cdunlap@llnl.gov>
96
97

COPYRIGHT

99       Copyright (C) 2007-2010 Lawrence Livermore National Security, LLC.
100       Copyright (C) 2002-2007 The Regents of the University of California.
101
102       MUNGE is free software: you can redistribute it and/or modify it  under
103       the  terms  of  the GNU General Public License as published by the Free
104       Software Foundation, either version 3  of  the  License,  or  (at  your
105       option)  any  later  version.  Additionally for the MUNGE library (lib‐
106       munge), you can redistribute it and/or modify it under the terms of the
107       GNU  Lesser  General  Public  License as published by the Free Software
108       Foundation, either version 3 of the License, or (at  your  option)  any
109       later version.
110
111