1
2UNMUNGE(1) MUNGE Uid 'N' Gid Emporium UNMUNGE(1)
3
4
5
7 unmunge - MUNGE credential decoder
8
9
11 unmunge [OPTION]...
12
13
15 The unmunge program validates a MUNGE credential (e.g., one created by
16 the munge program).
17
18 By default, the credential is read from stdin and the metadata and pay‐
19 load are written to stdout. When the metadata and payload are written
20 to the same stream, they are separated by a blank line.
21
22
24 -h, --help
25 Display a summary of the command-line options.
26
27 -L, --license
28 Display license information.
29
30 -V, --version
31 Display version information.
32
33 -i, --input file
34 Input the credential from the specified file.
35
36 -n, --no-output
37 Discard all output.
38
39 -m, --metadata file
40 Output metadata to the specified file.
41
42 -o, --output file
43 Output the payload to the specified file.
44
45 -k, --keys string
46 Specify a subset of metadata keys to output. The keys are case-
47 insensitive and delimited by whitespace, commas, semicolons, or
48 periods -- as long as the string is treated as a single argument
49 by the shell (e.g., enclosed by quotes). If a subset is not
50 specified, all available keys are selected by default.
51
52 -K, --list-keys
53 Display a list of metadata keys.
54
55 -S, --socket path
56 Specify the local domain socket for connecting with munged.
57
58
60 The following metadata keys are supported.
61
62 STATUS The status of the credential decode operation.
63
64 ENCODE_HOST
65 The address of the host on which the credential was encoded.
66
67 ENCODE_TIME
68 The time at which the credential was encoded (according to the
69 local clock of the host that encoded it).
70
71 DECODE_TIME
72 The time at which the credential was decoded (according to the
73 local clock of the host that decoded it).
74
75 TTL The time-to-live value (in seconds) placed within the creden‐
76 tial.
77
78 CIPHER The cipher type used to encode the credential.
79
80 MAC The MAC type used to encode the credential.
81
82 ZIP The compression type used to encode the credential.
83
84 UID The user ID of the process that encoded the credential.
85
86 GID The group ID of the process that encoded the credential.
87
88 UID_RESTRICTION
89 The user ID restriction placed within the credential.
90
91 GID_RESTRICTION
92 The group ID restriction placed within the credential.
93
94 LENGTH The length (in bytes) of the payload.
95
96
98 The unmunge program returns an exit code corresponding to the return
99 code of munge_decode(). On success, it returns a zero exit code which
100 signifies the credential is valid. On error, it prints an error mes‐
101 sage to stderr and returns a non-zero exit code.
102
103
105 Chris Dunlap <cdunlap@llnl.gov>
106
107
109 Copyright (C) 2007-2017 Lawrence Livermore National Security, LLC.
110 Copyright (C) 2002-2007 The Regents of the University of California.
111
112 MUNGE is free software: you can redistribute it and/or modify it under
113 the terms of the GNU General Public License as published by the Free
114 Software Foundation, either version 3 of the License, or (at your
115 option) any later version.
116
117 Additionally for the MUNGE library (libmunge), you can redistribute it
118 and/or modify it under the terms of the GNU Lesser General Public
119 License as published by the Free Software Foundation, either version 3
120 of the License, or (at your option) any later version.
121
122
124 munge(1), remunge(1), munge(3), munge_ctx(3), munge_enum(3), munge(7),
125 munged(8).
126
127 https://dun.github.io/munge/
128
129
130
131munge-0.5.13 2017-09-26 UNMUNGE(1)