diff options
author | Lennart Poettering <lennart@poettering.net> | 2021-03-11 20:17:10 +0100 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2021-03-26 12:21:56 +0100 |
commit | 8806bb4bc7fa15d6ca46e81b8d535730209a3b66 (patch) | |
tree | 95412964dee1dca33817f5fa6bb2150436338bf2 /man/systemd-ask-password.xml | |
parent | f6ab6199a2e8cbda64fe2574af572b8800da48bd (diff) | |
download | systemd-8806bb4bc7fa15d6ca46e81b8d535730209a3b66.tar.gz |
ask-password: when querying for a password, try to read from credential store first
This adds generic support for the SetCredential=/LoadCredential= logic
to our password querying infrastructure: if a password is requested by a
program that has a credential store configured via
$CREDENTIALS_DIRECTORY we'll look in it for a password.
The "systemd-ask-password" tool is updated with an option to specify the
credential to look for.
Diffstat (limited to 'man/systemd-ask-password.xml')
-rw-r--r-- | man/systemd-ask-password.xml | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/man/systemd-ask-password.xml b/man/systemd-ask-password.xml index 433260475d..f241064d8b 100644 --- a/man/systemd-ask-password.xml +++ b/man/systemd-ask-password.xml @@ -139,6 +139,17 @@ </varlistentry> <varlistentry> + <term><option>--credential=</option></term> + <listitem><para>Configure a credential to read the password from – if it exists. This may be used in + conjunction with the <varname>LoadCredential=</varname> and <varname>SetCredential=</varname> + settings in unit files. See + <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry> for + details. If not specified, defaults to <literal>password</literal>. This option has no effect if no + credentials directory is passed to the program (i.e. <varname>$CREDENTIALS_DIRECTORY</varname> is not + set) or if the no credential of the specified name exists.</para></listitem> + </varlistentry> + + <varlistentry> <term><option>--timeout=</option></term> <listitem><para>Specify the query timeout in seconds. Defaults |