search

dun / munge

MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating user credentials.
GNU Lesser General Public License v3.0
250 stars 46 forks source link

Location of munge.key #129

Closed jht-prog closed 1 year ago

jht-prog commented 1 year ago

It's not clear to me how to locate the munge.key in directory other than /etc/munge. Can the key in fact be moved or located based on a configuration option?

dun commented 1 year ago

The munged --key-file command-line option can be used to specify the location of the key file at runtime. This option can be added to /etc/sysconfig/munge or /etc/default/munge (location dependent upon how the software was configured).

This key file must be owned by the same user ID that will run munged (typically user "munge") and its permissions should be set to 0600. Also, the directory in which the key file resides must be owned by that user and its permissions should be set to 0700.

See Securing the Installation for additional details.

jht-prog commented 1 year ago

Fantastic, thank you very much.

On Jan 18, 2023, at 3:29 PM, Chris Dunlap @.***> wrote:

The munged --key-file command-line option can be used to specify the location of the key file at runtime. This option can be added to /etc/sysconfig/munge or /etc/default/munge (location dependent upon how the software was configured).

This key file must be owned by the same user ID that will run munged (typically user "munge") and its permissions should be set to 0600. Also, the directory in which the key file resides must be owned by that user and its permissions should be set to 0700.

See Securing the Installation https://github.com/dun/munge/wiki/Installation-Guide#securing-the-installation for additional details.

— Reply to this email directly, view it on GitHub https://github.com/dun/munge/issues/129#issuecomment-1387740499, or unsubscribe https://github.com/notifications/unsubscribe-auth/AYTNP45ZRJLE2BK6L5SMX7LWTBHEDANCNFSM6AAAAAAT7GXWWQ. You are receiving this because you authored the thread.

dun commented 1 year ago

You're welcome.