draw(3): typo dp

[plan9front.git] / sys / man / 4 / keyfs

diff --git a/sys/man/4/keyfs b/sys/man/4/keyfs
index c78e31df44044c4d657d1d30401cd20defee7589..960598f864dc5375cc8fe17e956427d7837d74d0 100644 (file)
--- a/sys/man/4/keyfs
+++ b/sys/man/4/keyfs
@@ -14,6 +14,9 @@ keyfs, warning \- authentication database files
 .BI -m mntpt
 ]
 [
+.B -r
+]
+[
 .I keyfile
 ]
 .PP
@@ -41,7 +44,7 @@ reads and decrypts file
 .I keyfile
 (default
 .BR /adm/keys )
-using the DES key,
+using the DES or AES key,
 which is by default read from
 .B #r/nvram
 (see
@@ -51,13 +54,14 @@ With option
 .I keyfs
 prompts for a password from which the key is derived.
 .I Keyfile
-holds a 41-byte record for each user in the database.
-Each record is encrypted separately
-and contains the user's name,
+holds a 41-byte (57-byte for AES) record for each user in the database.
+Each record contains the user's name,
 DES key,
 status,
-host status,
-and expiration date.
+warning status,
+expiration date,
+secret password
+and AES key.
 The name is a
 null-terminated
 .SM UTF
@@ -67,18 +71,26 @@ bytes long.
 The status is a byte containing
 binary 0 if the account is enabled,
 1 if it is disabled.
-Host status is a byte containing
-binary 1 if the user is a host,
-0 otherwise.
+Warning status is a byte containing
+the number of user expiration notifications.
 The expiration date is four-byte little-endian integer
 which represents the time in seconds since the epoch
 (see
 .IR date (1))
 at which the account will expire.
+The secret password is a null-terminated
+.SM UTF
+string
+.B SECRETLEN
+bytes long.
 If any changes are made to the database that affect the information stored in
 .IR keyfile ,
 a new version of the file is written.
 .PP
+If the
+.B -r
+option is given, the database is mounted `read-only' and no changes are permitted.
+.PP
 There are two authentication databases,
 one for Plan 9 user information,
 and one for SecureNet user information.
@@ -111,6 +123,8 @@ does not allow duplicate names when creating or renaming user entries.
 .PP
 All files in the user directories except for
 .B key
+and
+.B aeskey
 contain
 .SM UTF
 strings with a trailing newline when read,
@@ -121,6 +135,10 @@ strings with or without a trailing newline.
 contains the
 .BR DESKEYLEN -byte
 encryption key for the user.
+.B Aeskey
+contains the
+.BR AESKEYLEN -byte
+encryption key.
 .PP
 The following files appear in the user directories.
 .TF expire
@@ -133,6 +151,12 @@ Writing
 .I key
 changes the key in the database.
 .TP
+.B aeskey
+The AES encryption key for the user.
+.TP
+.B secret
+The secret password.
+.TP
 .B log
 The number of consecutive failed authentication attempts for the user.
 Writing the string