> I don't actually know where to look for useful docs. 

cpu% lookman secstore
man 1 secstore # secstore(1)
man 1 ssh2 # ssh2(1)
man 2 aes # aes(2)
man 2 authsrv # authsrv(2)
man 4 cwfs # cwfs(4)
man 4 factotum # factotum(4)
man 4 ssh # ssh(4)
man 8 drawterm # drawterm(8)
man 8 plan9.ini # plan9.ini(8)
man 8 secstore # secstore(8)

> ... where do people commonly put their secstore

secstore(8) says:
         Secuser is an administrative command that runs on the sec-
         store machine, normally the authserver,
    ...
    FILES
          /adm/secstore/who/user     secstore account name, expiration
                                     date, verifier
          /adm/secstore/store/user/  user 's file storage


> ... where in termrc do you have the bits to read it, etc.

factotum(4) says:
          By default when factotum starts it looks for a secstore(1)
          account on $auth for the user and, if one exists, prompts
          for a secstore password in order to fetch the file factotum,
          which should contain control file commands.  An example
          would be
            key dom=x.com proto=p9sk1 user=boyd !hex=26E522ADE2BBB2A229
            key proto=rsa service=ssh size=1024 ek=3B !dk=...
          ...

So you don't need anything in termrc. Once you've given yourself a
secstore account and stored a factotum file there with 'auth/secstore -p',
the terminal boot process will prompt you for a secstore password instead
of your terminal password, before termrc is run.

You do need to start secstored in cpurc or in /cfg/$authserver/cpurc


------------------------------------------
9fans: 9fans
Permalink: 
https://9fans.topicbox.com/groups/9fans/T2e892f330bc0513b-Mbf7af6d200a95a2963a3df85
Delivery options: https://9fans.topicbox.com/groups/9fans/subscription

Reply via email to