CONSERVER.PASSWD(5)

NAME
conserver.passwd - user access information for conserver(8)

SYNOPSIS
username:password:consoles

DESCRIPTION
The conserver.passwd file is the user authentication and authorization file for conserver(8). Upon each incoming client connection, conserver opens and reads the conserver.passwd file, so edits to the file take effect immediately. It reads only until the first username match.

Blank lines and comment lines (those beginning with a ``#'' and optional leading whitespace) are ignored. Non-ignored lines beginning with whitespace are considered continuations of the previous line. This allows you to span one logical line over many physical lines and insert comments wherever appropriate.

Each logical line consists of three colon-separated fields. Leading and trailing white space in each field is ignored.

username
    the login name of the authorized user, or the string ``*any*'' to match any user. This is compared against the name sent by the console client, based either on the user's identity or on the -l option. Since conserver only uses the first username match, an ``*any*'' entry will apply to any user without an entry earlier in the file.

password
    the encrypted password, or the string ``*passwd*'' to indicate that conserver should look up the user's password in the system passwd (or shadow) database. If PAM support has been enabled (--with-pam), PAM lookups will be done instead of passwd (or shadow) lookups. If this field is empty, password checking is bypassed for this user.

consoles
    a comma- and/or space-separated list of consoles to which the user is permitted to connect, or the string ``any'' to allow access to any console. These names must match the console names in the conserver.cf file. If regular expression support was compiled in using --with-regex, the names here are treated as regular expressions.

EXAMPLE

mary:r71mXjfALB5Ak:any
    Mary may connect to any console if her password matches; it does not matter whether she has a login on the conserver host.

fred:*passwd*:foo.example.com,bar.example.com
    Fred may connect only to the listed consoles, and only with his regular login password on the conserver host.

bozo:*:
    Bozo is not allowed access to any consoles.

*any*:*passwd*:any
    Anyone not listed above may access any console if they have a regular login and know the password.

SEE ALSO
console(1), conserver.cf(5), conserver(8)

BUGS

There is currently no way provided by the conserver package to generate the encrypted password strings besides copying them from the system passwd database.