|
Packit |
5f9837 |
=========
|
|
Packit |
5f9837 |
cifscreds
|
|
Packit |
5f9837 |
=========
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
-----------------------------------------
|
|
Packit |
5f9837 |
manage NTLM credentials in kernel keyring
|
|
Packit |
5f9837 |
-----------------------------------------
|
|
Packit |
5f9837 |
:Manual section: 1
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
SYNOPSIS
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
cifscreds add|clear|clearall|update [-u username] [-d] host|domain
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
***********
|
|
Packit |
5f9837 |
DESCRIPTION
|
|
Packit |
5f9837 |
***********
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
The ``cifscreds`` program is a tool for managing credentials (username
|
|
Packit |
5f9837 |
and password) for the purpose of establishing sessions in multiuser
|
|
Packit |
5f9837 |
mounts.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
When a cifs filesystem is mounted with the "multiuser" option, and does
|
|
Packit |
5f9837 |
not use krb5 authentication, it needs to be able to get the credentials
|
|
Packit Service |
668931 |
for each user from somewhere. The ``cifscreds`` program is the tool used
|
|
Packit |
5f9837 |
to provide these credentials to the kernel.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
The first non-option argument to cifscreds is a command (see the
|
|
Packit Service |
668931 |
`COMMANDS`_ section below). The second non-option argument is a hostname
|
|
Packit |
5f9837 |
or address, or an NT domain name.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
COMMANDS
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
add
|
|
Packit Service |
668931 |
Add credentials to the kernel to be used for connecting to the given
|
|
Packit Service |
668931 |
server, or servers in the given domain.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
clear
|
|
Packit Service |
668931 |
Clear credentials for a particular host or domain from the kernel.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
clearall
|
|
Packit Service |
668931 |
Clear all cifs credentials from the kernel.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
update
|
|
Packit Service |
668931 |
Update stored credentials in the kernel with a new username and
|
|
Packit Service |
668931 |
password.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
*******
|
|
Packit |
5f9837 |
OPTIONS
|
|
Packit |
5f9837 |
*******
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
-d, --domain
|
|
Packit Service |
668931 |
The provided host/domain argument is a NT domainname.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
Ordinarily the second argument provided to cifscreds is treated as a
|
|
Packit Service |
668931 |
hostname or IP address. This option causes the cifscreds program to
|
|
Packit Service |
668931 |
treat that argument as an NT domainname instead.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
If there are not host specific credentials for the mounted server, then
|
|
Packit Service |
668931 |
the kernel will next look for a set of domain credentials equivalent to
|
|
Packit Service |
668931 |
the domain= option provided at mount time.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
-u, --username
|
|
Packit Service |
668931 |
Ordinarily, the username is derived from the unix username of the user
|
|
Packit Service |
668931 |
adding the credentials. This option allows the user to substitute a
|
|
Packit Service |
668931 |
different username.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
*****
|
|
Packit |
5f9837 |
NOTES
|
|
Packit |
5f9837 |
*****
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
The cifscreds utility requires a kernel built with support for the
|
|
Packit Service |
668931 |
``login`` key type. That key type was added in v3.3 in mainline Linux
|
|
Packit |
5f9837 |
kernels.
|
|
Packit |
5f9837 |
|
|
Packit Service |
668931 |
Since ``cifscreds`` adds keys to the session keyring, it is highly
|
|
Packit Service |
668931 |
recommended that one use ``pam_keyinit`` to ensure that a session keyring
|
|
Packit |
5f9837 |
is established at login time.
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
SEE ALSO
|
|
Packit |
5f9837 |
********
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
pam_keyinit(8)
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
*******
|
|
Packit |
5f9837 |
AUTHORS
|
|
Packit |
5f9837 |
*******
|
|
Packit |
5f9837 |
|
|
Packit |
5f9837 |
The cifscreds program was originally developed by Igor Druzhinin
|
|
Packit |
5f9837 |
<jaxbrigs@gmail.com>. This manpage and a redesign of the code was done
|
|
Packit |
5f9837 |
by Jeff Layton <jlayton@samba.org>.
|