# Default settings for all clients. These values are the default # values, so uncomment and change them if you want different ones. [DEFAULT] # How long until a client is considered invalid - that is, ineligible # to get the data this server holds. ;timeout = 1h # How often to run the checker to confirm that a client is still up. # Note: a new checker will not be started if an old one is still # running. The server will wait for a checker to complete until the # above "timeout" occurs, at which time the client will be marked # invalid, and any running checker killed. ;interval = 5m # What command to run as "the checker". ;checker = fping -q -- %%(host)s ;#### ;# Example client ;[foo] ; ;# OpenPGP key fingerprint ;fingerprint = 7788 2722 5BA7 DE53 9C5A 7CFA 59CF F7CD BD9A 5920 ; ;# This is base64-encoded binary data. It will be decoded and sent to ;# the client matching the above fingerprint. This should, of course, ;# be OpenPGP encrypted data, decryptable only by the client. ;secret = ; hQIOA6QdEjBs2L/HEAf/TCyrDe5Xnm9esa+Pb/vWF9CUqfn4srzVgSu234 ; REJMVv7lBSrPE2132Lmd2gqF1HeLKDJRSVxJpt6xoWOChGHg+TMyXDxK+N ; Xl89vGvdU1XfhKkVm9MDLOgT5ECDPysDGHFPDhqHOSu3Kaw2DWMV/iH9vz ; 3Z20erVNbdcvyBnuojcoWO/6yfB5EQO0BXp7kcyy00USA3CjD5FGZdoQGI ; Tb8A/ar0tVA5crSQmaSotm6KmNLhrFnZ5BxX+TiE+eTUTqSloWRY6VAvqW ; QHC7OASxK5E6RXPBuFH5IohUA2Qbk5AHt99pYvsIPX88j2rWauOokoiKZo ; t/9leJ8VxO5l3wf/U64IH8bkPIoWmWZfd/nqh4uwGNbCgKMyT+AnvH7kMJ ; 3i7DivfWl2mKLV0PyPHUNva0VQxX6yYjcOhj1R6fCr/at8/NSLe2OhLchz ; dC+Ls9h+kvJXgF8Sisv+Wk/1RadPLFmraRlqvJwt6Ww21LpiXqXHV2mIgq ; WnR98YgSvUi3TJHrUQiNc9YyBzuRo0AjgG2C9qiE3FM+Y28+iQ/sR3+bFs ; zYuZKVTObqiIslwXu7imO0cvvFRgJF/6u3HNFQ4LUTGhiM3FQmC6NNlF3/ ; vJM2hwRDMcJqDd54Twx90Wh+tYz0z7QMsK4ANXWHHWHR0JchnLWmenzbtW ; 5MHdW9AYsNJZAQSOpirE4Xi31CSlWAi9KV+cUCmWF5zOFy1x23P6PjdaRm ; 4T2zw4dxS5NswXWU0sVEXxjs6PYxuIiCTL7vdpx8QjBkrPWDrAbcMyBr2O ; QlnHIvPzEArRQLo= ; ;# Host name; used only by the checker, not used by the server itself. ;host = foo.example.org ;#### ;#### ;# Another example client, named "bar". ;[bar] ;# The fingerprint is not space or case sensitive ;fingerprint = 3e393aeaefb84c7e89e2f547b3a107558fca3a27 ; ;# If "secret" is not specified, a file can be read for the data. ;secfile = /etc/mandos/bar-secret.bin ; ;# An IP address for host is also fine, if the checker accepts it. ;host = 192.0.2.3 ; ;# Parameters from the [DEFAULT] section can be overridden per client. ;interval = 5m ;#### [localhost] host = localhost fingerprint = B07A5EE29482B1EE3393A58C6C491F334052CBF1 secret = hQIOA47xJcFq0JRaEAgAu89CwyLHI6nlKSX4UDcKKxoBdQKYX3o2eIaWse/4D+Be q0S5yHUi06NWamapPOM8nHJkV6SJbg41/BEg/uTzyurwaaOxYdOeaPpQIIc3ce8d z44lVn9BI4jIOrX2F1oLW72y+qrljpM8kKf78rzjjMx6iPB3etz7X4yASBQ05+J0 BfI/Gl8R/ZoexKnoThGLDkDgmONdd2AGDpewu42oZd5lCDb3jwLVCLGOkq27EJFF RDADlUymO3H5XRVaceOzstr1GcZbDBbqDHPCXnRt5wSGM1CYXWsoEUda1h0VEPfJ NuEw5es0E0soRCGe3GbantesTz5U5c9Kj167HPGFxwgAu3TnhpuG/QFMq1zmmlFR s96Pw3gtKLWlTOFPY2aW4yakz5LkzJLEm0X6g+YbpEpXIaECAFGq/pHeTIv1bw9h bJ12Uztc7sW/eSCOHvlMcwUb403+2iptd58cBYDEgBz2IbitHjvSuWXkN56NcBZI meoaPwDK9/USK/cknh8MRUSqR33CKZCuDnk0qAEnqsZ2aQPmDvfGrHgthOz0r2wL x6dYin3G38r229+7Nf458v6yh1Qxo9wLIf2Z8KVH+GYVWWCQnjj+ylRzIStEIquX zJskTjteWZPBJrssUrvhW67kEScAe6WdiN921P5ei0xQxTdaXu4g7bdClGw0VIRf 79KkAQhCtSgPSXDD7eapoTBEwvgGvtcxq+eHA6MRh4HaWPCU1aGShY+jaQmDjBnc /s+X4BBBWTv+Top8F6E37e4iBnjKkZ7xzmrq1YNJ4T3uJIdOiyKIN8a1M/U7bh3t jHqGNZwQ9Bj07xcj9YnAgqvmeH1FWAdmGVOAd6BmPtNAD6otlKOwyDNYk1rau7gx VuxhtaSZpDsabvJRY0+GcU/qP92P3aU=