Return to skeyaudit.1 CVS log

Up to [local] / src / usr.bin / skeyaudit

Change S/Key stuff from using a flat file (/etc/skeykeys) to a directory
where each user gets their own file, which is owned by that user.

An old S/Key database may be converted by running "skeyinit -C" as root.

Programs that need to access the S/Key database no longer need to be
setuid root.  They must now be setgid auth instead.

.\" $OpenBSD: skeyaudit.1,v 1.9 2002/05/16 03:50:42 millert Exp $
.\"
.Dd 22 July 1997
.Dt SKEYAUDIT 1
.Os
.Sh NAME
.Nm skeyaudit
.Nd warn users if their S/Key will soon expire
.Sh SYNOPSIS
.Nm skeyaudit
.Op Fl a
.Op Fl i
.Op Fl l Ar limit
.Sh DESCRIPTION
.Nm
searches through the files in
.Pa /etc/skey
for users whose S/Key sequence number is less than
.Ar limit ,
and mails them a reminder to run
.Xr skeyinit 1
soon.
.Pp
The options are as follows:
.Bl -tag -width Ds
.It Fl a
Check all keys in
.Pa /etc/skey
This option is only available to the superuser and
is useful to run regularly via
.Xr cron 8 .
.It Fl i
Interactive mode.
Don't send mail, just print to the standard output.
.It Fl l Ar limit
The limit used to determine whether or not a user should be notified.
The default is to notify if there are fewer than 12 keys left.
.El
.Sh FILES
.Bl -tag -width /etc/skey
.It Pa /etc/skey
directory containing user entries for S/Key
.El
.Sh SEE ALSO
.Xr skey 1 ,
.Xr skeyinit 1