4fe620bb9a
- Switch to using unix domain sockets instead of network sockets for comms between "console" client and "conserver" server. This is a compile- time toggle and disables network sockets. Uses SO_PEERCRED for access control so it's possible to do per-user acls in conserver without the need to re-enter user passwords. - Add a flavour to use network sockets for those that need it (i.e. running the client on a different machine to the server). - Tweaks to pkg-readme explaining the above. |
||
---|---|---|
.. | ||
conserver.rc | ||
DESCR | ||
PLIST | ||
README |
$OpenBSD: README,v 1.6 2014/10/07 22:14:17 sthen Exp $ +----------------------------------------------------------------------- | Running ${FULLPKGNAME} on OpenBSD +----------------------------------------------------------------------- Connecting to /dev/cuaXX serial ports ===================================== As installed, conserver is running as user _conserver. If you want to use conserver to manage local serial ports, you have to add _conserver to group dialer in /etc/group: dialer:*:117:_conserver This is not necessary if you only use it to log and control access to terminal servers over the network rather than on local serial ports. Port flavours ============= Conserver can be built using different methods to communicate between the server ("conserver" process) and clients ("console") - network sockets, and unix domain sockets. The default in OpenBSD packages before 8.2.0 was to communicate using network sockets. Since 8.2.0, the OpenBSD package has switched to using unix domain sockets by default; this means that server and client must be on the same machine. The old method is still available by installing the "net" flavour of the package; you will need to install the "conserver-XX-net" package. If you have already installed the standard package, "pkg_delete conserver" and then "pkg_add conserver--net". Other notes =========== Log files (by default, /var/log/conserver and /var/log/consoles/<name>) can get large, so you will probably want to arrange rotation, either with newsyslog(8) or some other method. Upgrading from previous OpenBSD packages ======================================== If you have upgraded from a previous version of the OpenBSD package which ran as root (pre-OpenBSD 5.6), you will need to change permissions/ownership on log files to ensure that the _conserver user can write to them, e.g.: chown _conserver /var/log/conserver /var/log/consoles/*