SECSTORED(1)

🦋 bestie's secstored(1) page 🦋

okay so we're in the General Commands Manual, and this page is the whole secstored / secuser situation. it's giving authserver admin bestie, and we're keeping every tiny detail, periodt. 💅

🎀 NAME 🎀

secstored, secuser - secstore commands.

🌸 SYNOPSIS 🌸

secstored [-R] [-S servername] [-s tcp!*!5356] [-x mountpoint]
secuser [-v] username

💖 DESCRIPTION 💖

okay so secstored is the one that serves requests from secstore(1). main character server energy, honestly.

here's the option tea, with zero invented lore:

• -R — supplements the password check with a call to a RADIUS server, for checking hardware tokens or other validation. yes bestie, RADIUS is in the building.
• -S servername — the synopsis lists -S servername. that's the whole description on this page, so I'm not making up extra deets. 🙈
• -s tcp!*!5356 — the synopsis lists -s tcp!*!5356. no extra description is given; keep it exactly like that.
• -x mountpoint / -xmountpoint — specifies an alternative to the default network /net. the description literally writes it as -xmountpoint with no space, while the synopsis has -x mountpoint; both spellings are here, bestie, don't come for me. 💅
• -v — listed in the secuser synopsis as secuser [-v] username; no further description is provided.
• username — the argument in secuser [-v] username; also no extra description, so we keep it exactly as written.

secuser is an administrative command that runs on the secstore machine, normally the authserver, to create new accounts and to change status on existing accounts. it prompts for account information such as password and expiration date, writing to /secstore/who/$uid. important: the /secstore directory should be created mode 770 for the userid or groupid of the secstored process. slay, but with permissions.

by default, secstored warns the client if no account exists. if you prefer to obscure this information, use secuser to create an account FICTITIOUS. that's the whole stealth mode note, no cap.

🗂️ FILES 🗂️

• /secstore/who/$uid — secstore account name, expiration date, verifier.
• /secstore/store/$uid/ — users' files.
• /ndb/auth — for mapping local userid to RADIUS userid.

📦 SOURCE 📦

/src/cmd/auth/secstore

👀 SEE ALSO 👀

secstore(1)

okay that's the SECSTORED(1) version marker from the General Commands Manual — source is at /src/cmd/auth/secstore, and the page doesn't print a date, so I'm not inventing one, periodt. byeee bestie 🫶💖