wm: doc

ref: 0aa02b0fc8db2ddbf44a7a9bf28504bff3a4743d
dir: /auth.ms/

View raw version
To set up an auth server, add lines like below to /lib/ndb/local:

    auth=198.51.100.2                        
    authdom=example.com                          

These lines must be added to a tuple that applies to your machine.

It's also recommended you add this:

dom=p9auth.example.com
    cname=example.com

This mysterious line somehow causes the auth server to work when otherwise not detected. Don't ask me why.

Make sure you have added the user to the filesystem.

Configure the nvram with auth/wrkey.

In /lib/ndb/auth, you need something like the following:

hostid=glenda

uid=!sys uid=!adm uid=*

This allows glenda to speak on behalf of all users except sys and adm.

If the machine is an auth server, keyfs will be started upon boot.

Then, run:

auth/changeuser username