Section 8: administration and privileged commands
suffix2instance – Directory Server script for finding a backend name Synopsis suffix2instance [-Z serverID] -s suffix [-h] Description Maps a suffix to a backend name. This script can be run while the server is running, or stopped. Options A summary of options is included below: -Z Server Identifier The server ID of the Directory Server…
suexec – Switch user before executing external programs Synopsis suexec –V Summary suexec is used by the Apache HTTP Server to switch to another user before executing CGI programs. In order to achieve this, it must run as root. Since the HTTP daemon normally doesn’t run as root, the suexec executable needs the…
Sudo 1.9.9 Name sudoreplay – replay sudo session logs Synopsis sudoreplay [-FhnRS ] [-d dir ] [-f filter ] [-m num ] [-s num ] ID [@offset ] sudoreplay [-h ] [-d dir ] –l [search expression] Description sudoreplay plays back or lists the output logs created by sudo When replaying, sudoreplay can play the…
Sudo 1.9.9 Name sudo sudoedit – execute a command as another user Synopsis sudo –h | K | k | V sudo –v [-ABknS ] [-g group ] [-h host ] [-p prompt ] [-u user ] sudo –l [-ABknS ] [-g group ] [-h host ] [-p prompt ] [-U user ] [-u user…
Sudo 1.9.9 Name sudo_sendlog – send sudo I/O log to log server Synopsis sudo_sendlog [-AnV ] [-b ca_bundle ] [-c cert_file ] [-h host ] [-i iolog-id ] [-k key_file ] [-p port ] [-r restart-point ] [-R reject-reason ] [-s stop-point ] [-t number ] path Description sudo_sendlog can be used to send the…
sudo_root – How to run administrative commands Synopsis sudo command sudo -i Introduction By default, the password for the user "root" (the system administrator) is locked. This means you cannot login as root or use su. Instead, the installer will set up sudo to allow the user that is created during install to run all…
Sudo 1.9.9 Name sudo_plugin – Sudo Plugin API Description Starting with version 1.8, sudo supports a plugin API for policy and session logging. Plugins may be compiled as dynamic shared objects (the default on systems that support them) or compiled statically into the sudo binary itself. By default, the sudoers plugin provides audit, security policy…
Sudo 1.9.9 Name sudo_logsrvd – sudo event and I/O log server Synopsis sudo_logsrvd [-hnV ] [-f file ] [-R percentage ] Description sudo_logsrvd is a high-performance log server that accepts event and I/O logs from sudo It can be used to implement centralized logging of sudo logs. The server has two modes of operation: local…
Sudo 1.9.9 Name sudo sudoedit – execute a command as another user Synopsis sudo –h | K | k | V sudo –v [-ABknS ] [-g group ] [-h host ] [-p prompt ] [-u user ] sudo –l [-ABknS ] [-g group ] [-h host ] [-p prompt ] [-U user ] [-u user…
subscription-manager – Registers systems to a subscription management service and then attaches and manages subscriptions for software products. Synopsis subscription-manager command [options] Description subscription-manager is a client program that registers a system with a subscription management service such as the Customer Portal Subscription Management service or on-premise Subscription Asset Manager. Red Hat provides content updates…
subscription-manager-gui – Launches the UI client of the Subscription Manager. Synopsis subscription-manager-gui [–register] Description subscription-manager-gui opens the local client tool to manage subscriptions and installed products on Red Hat Enterprise Linux systems. The same tasks that can be performed by invoking subscription-manager can be performed in the GUI, including registering systems with a subscription management…
stunnel_selinux – Security Enhanced Linux Policy for the stunnel processes Description Security-Enhanced Linux secures the stunnel processes via flexible mandatory access control. The stunnel processes execute with the stunnel_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
stunnel – universal SSL tunnel Synopsis Unix: stunnel [<filename>] | -fd n | -help | -version | -sockets WIN32: stunnel [ [-install | -uninstall | -start | -stop] | -exit] [-quiet] [<filename>] ] | -help | -version | -sockets Description The stunnel program is designed to work as SSL encryption wrapper between remote clients and local (inetd-startable) or remote…
swanctl – strongSwan configuration, control and monitoring command line interface. Synopsis command [option~…] -h | –help Description swanctl is a cross-platform command line utility to configure, control and monitor the strongSwan IKE daemon. It is a replacement for the aging starter, ipsec and stroke tools. swanctl uses a configuration file called swanctl.conf(5) to parse configurations…
ipsec scepclient – Client for the SCEP protocol Synopsis ipsec scepclient [argument …] ipsec scepclient –help ipsec scepclient –version Description scepclient is a client implementation of Cisco System’s Simple Certificate Enrollment Protocol (SCEP) written for Linux strongSwan <http://www.strongswan.org>. scepclient is designed to be used for certificate enrollment on machines using the OpenSource IPsec solution strongSwan….
charon-cmd – Simple IKE client (IPsec VPN client) Synopsis charon-cmd –host hostname –identity identity [ options ] Description charon-cmd is a program for setting up IPsec VPN connections using the Internet Key Exchange protocol (IKE) in version 1 and 2. It supports a number of different road-warrior scenarios. Like the IKE daemon charon, charon-cmd has…
ipsec – invoke IPsec utilities Synopsis command [arguments] [options] Description The ipsec utility invokes any of several utilities involved in controlling and monitoring the IPsec encryption/authentication system, running the specified command with the specified arguments and options as if it had been invoked directly. This largely eliminates possible name collisions with other software, and also…
ipsec scepclient – Client for the SCEP protocol Synopsis ipsec scepclient [argument …] ipsec scepclient –help ipsec scepclient –version Description scepclient is a client implementation of Cisco System’s Simple Certificate Enrollment Protocol (SCEP) written for Linux strongSwan <http://www.strongswan.org>. scepclient is designed to be used for certificate enrollment on machines using the OpenSource IPsec solution strongSwan….
ipsec – invoke IPsec utilities Synopsis command [arguments] [options] Description The ipsec utility invokes any of several utilities involved in controlling and monitoring the IPsec encryption/authentication system, running the specified command with the specified arguments and options as if it had been invoked directly. This largely eliminates possible name collisions with other software, and also…
string2key – map a password into a key Synopsis [-5 | –version5 ] [-4 | –version4 ] [-a | –afs ] [-c cell | –-cell= cell ] [-w password | –-password= password ] [-p principal | –-principal= principal ] [-k string | –-keytype= string ] password Description performs the string-to-key function. This is useful when…