sfs_users(5)

NAME
sfs_users - user-authentication database

DESCRIPTION
The sfs_users file, maintained and used by the sfsauthd program, maps public keys to local users. It is roughly analogous to the Unix /etc/passwd file. Each line of sfs_users has the following format:

user:public-key:credentials:SRP-info:private-key user is the unique name of a public key in the database. Ordinarily it the same as a user-name in the local password file. However, in certain cases it may be useful to map multiple public keys to the same local account (for instance if several people have an account with root privileges). In such cases, each key should be given a unique name (e.g., dm/root, kaminsky/root, etc.). Public key is simply the user's public key. A user must posses the corresponding private key to authenticate himself to servers. credentials are the credentials associated with a particular SFS public key. It is simply a local username to be looked up in the Unix password and group databases. Ordinarily, credentials should be the same as user unless multiple keys need to be mapped to the same credentials. SRP-info is the server-side information for the SRP protocol. Unlike the previous fields, this information must be kept secret. If the information is disclosed, an attacker may be able to impersonate the server by causing the sfskey add command to fetch the wrong HostID. Note also that SRP-info is specific to a particular hostname. If you change the Location of a file server, users will need to register new SRP-info. private-key is actually opaque to sfsauthd. It is private, per-user data that sfsauthd will return to users who successfully complete the SRP protocol. Currently, sfskey users this field to store an encrypted copy of a user's private key, allowing the user to retrieve the private key over the network.

FILES
user-authentication database -- files in /etc/sfs supersede /usr/local/share/sfs

SEE ALSO
rex(1), sfsagent(1), sfskey(1), ssu(1), sfs_config(5), sfs_srp_params(5), sfsauthd_config(5), sfscd_config(5), sfsrwsd_config(5), sfssd_config(5), sfsauthd(8), sfscd(8), sfsrwsd(8), sfssd(8)

The full documentation for SFS is maintained as a Texinfo manual. If the info and SFS programs are properly installed at your site, the command info SFS should give you access to the complete manual.

For updates, documentation and software distribution, please see the SFS website at http://www.fs.net.

AUTHOR
sfsdev@redlab.lcs.mit.edu