authtry(4gx)

✨ Name ✨

okay so bestie, meet authtry — section 4gx of the Gromox admin reference — and it is literally a diagnostic utility for debugging authentication. 💅 This is the backstage-pass command for when auth is acting sus and you need to peek at what’s going on.

🎀 Synopsis 🎀

PASS='xyz!' /usr/libexec/gromox/authtry -u abc@example.com

PASS='xyz!' /usr/libexec/gromox/authtry -L [-Z] [-H ldap://localhost/]
-u cn=abc,o=example

🦋 Description 🦋

authtry can be used to debug the user authentication procedure without having to use gdb to attach to, and pause, a running daemon. No cap, that’s the whole vibe: poke at authentication without freezing a live daemon just to inspect it. 🫶

The password is to be conveyed via an environment variable, PASS. And listen, this part matters: PASS being unset is distinct from PASS being the zero-length string; both modes are supported. 😭

🚨 important, bestie: unset PASS is not the same as PASS being an empty string. Both are real supported modes, so don’t mush them together.

🔥 Options 🔥

• -H uri — LDAP server to connect to, in URI form. If not specified, the libldap default is used. 🌸
• -L — Bypass the normal user lookup via authmgr(4gx), bypass user metadata lookup in MySQL, and only perform an LDAP bind. In this sense, authtry is similar to ldapsearch(1), but without performing any search. It’s giving ldapsearch energy minus the search part, periodt. 💅
• -Z — Perform LDAP STARTTLS (only meaningful when combined with -L). 🔐
• -u username/dn — The Gromox username (usually user@domain form), or, in case -H is used, an LDAP Distinguished Name. 👑

🌈 See also 🌈

gromox(7) — go read that too, bestie, iykyk. 📖✨

source/version: Gromox · page: authtry(4gx) · date: not listed on the original footer, so I’m not inventing one — no cap, just cute sign-off energy 💖🫶🎀