eurephiadm-attempts(7) [debian man page]

eurephiadm attempts(7)													    eurephiadm attempts(7)

NAME

       eurephiadm-attempts - Manage the attempts log in eurephia

DESCRIPTION

       When a remote user fails to authenticate correctly, the attemp will be logged.  After a certain amount of attempts the IP address, certifi-
       cate and/or user account will be blocked.  The eurephiadm attempts command is used to get an overview over what	is  registered	as  failed
       attempts and to give the possibility to reset or delete the registered attempts counter.

       Available modes for the attempts command are:

       -D | --delete
	      Delete a registered login attempt

       -R | --reset
	      Reset a registered login attempt

       -l | --list
	      List all registered login attempts

       -h | --help <mode>
	      Show help

DELETE MODE

       The attempts delete mode will remove a record from the attempts log.

   One of the following parameters must be given (only one):
       -u | --username <username>
	      User name to delete

       -d | --digest <SHA1 digest>
	      Certificate SHA1 digest to delete

       -i | --ipaddr <IP address>
	      IP address to delete

       -a | --attemptid <ID>
	      Attempts record ID to delete

RESET MODE

       The attempts reset mode will reset the attempt counter.

   One of the following parameters must be given (only one):
       -u | --username <username>
	      User name to reset

       -d | --digest <SHA1 digest>
	      Certificate SHA1 digest to reset

       -i | --ipaddr <IP address>
	      IP address to reset

       -a | --attemptid <ID>
	      Attempts record ID to reset

LIST MODE

       The attempts list mode will show all registered login attempts.

       -v | --verbose
	      Show more details

   Filters:
       -u | --username <username>
	      List only attempts matching the given user name

       -d | --digest <SHA1 digest>
	      List only attempts matching the given SHA1 certificate digest

       -i | --ipaddr <IP address>
	      List only attempts matching the given IP address

SEE ALSO

       eurephiadm-blacklist(7), eurephia-config(7)

AUTHOR

       Copyright (C) 2008-2010	David Sommerseth <dazo@users.sourceforge.net>

David Sommerseth						     July 2010						    eurephiadm attempts(7)

eurephiadm usercerts(7) 												   eurephiadm usercerts(7)

NAME

       eurephiadm-usercerts
	- Managing user accounts and certificate relations

DESCRIPTION

       For  a  user  to  connect  to a eurephia enabled OpenVPN server, a user account must have been created and activated and an SSL certificate
       available to the user must have been registered.  The user account and certificate the user may use must then be linked together, and  this
       linking the eurephiadm usercert command takes care of.

       It  is also this relation which gives you the option to control which network resources the VPN clients may access, by assigning a firewall
       profile to such user-certificate links.

       Available modes for the usercerts command are:

       -A | --add
	      Register a new certificate and user-cert link

       -D | --delete
	      Delete a certificate and user-cert link

       -S | --set-fwprofile
	      Sets the firewall access profile for a user-cert link

       -l | --list
	      List all registered user-cert links

       -h | --help <mode>
	      Help about a specific mode

       The list mode will list all registered links between user accounts and certificates.

LIST MODE

       The list mode will show all registered user-certificate links

       -S | --sort <sort keys>
	      Define the sorting of the list

	      Valid sort keys are:

	      uid
	       Nummeric User ID

	      certid
	       Nummeric Certificate ID

	      accessprofile
	       Nummeric firewall profile ID

	      registered
	       According to when the user-cert was registered

	      uicid
	       Nummeric user-cert link ID

SET FW PROFILE MODE

       The set-fwprofile mode will update the firewall access profile for a given user-cert link

       Options: (both required)

       -n | --uicid
	      Unique record id of certificate and user account link

       -a | --accessprofile
	      Firewall profile ID

ADD MODE

       The add mode will register a new link between a user account and a certificate.

       -c | --certid
	      Required - Certificate ID

       -i | --uid
	      Required - User account ID

       -a | --accessprofile
	      Firewall profile ID to use for this access

DELETE MODE

       The delete mode will delete a link between a user account and a certificate.

       -c | --certid
	      Certificate ID

       -i | --uid
	      User account ID

       -n | --uicid
	      Unique record id of certificate and user account link

       -a | --accessprofile
	      Firewall profile ID

SEE ALSO

       eurephiadm-users(7), eurephiadm-certs(7), eurephiadm-fwprofiles(7)

AUTHOR

       Copyright (C) 2008-2010	David Sommerseth <dazo@users.sourceforge.net>

David Sommerseth						     July 2010						   eurephiadm usercerts(7)