Command Line

Documentation / Contents - CyLogin

• Overview of CyLogin
  • What It Is
  • What It Is Not
  • The Programs
  • In This Book
• Setting Up
  • What You Need
  • Build and Install
  • Enable With the Helper
  • Linux SysV and systemd
  • NetBSD rc.d
  • PAM Service File
  • Xservers and VT
  • Headless and LXC
  • Competing Display Managers
  • Check That It Works
  • Disable and Rollback
  • Common Mistakes
• Using CyLogin
  • Logging In
  • Faces
  • noiconlogin
  • Session Lock
  • Autologin and Classroom
  • After Login (Session)
  • Failsafe
• Configuration
  • Master Conf
  • Appearance
  • Session Path
  • Unsafe Knobs
  • Autologin Knobs
  • Lock Timeout
  • Classroom Sample
• Enable and Disable Helpers
  • cylogin-enable
  • Every enable Flag
  • cylogin-disable
  • Examples
• Security and PAM
  • Defaults
  • PAM Stacks
  • Empty Password Gate
  • Auth Dir and Cookies
  • Vs XDM and login
  • Lab Matrix
• Command Line
  • cylogind
  • cylogin Greeter
  • cylogin-authcheck
  • cychooser
• Keys and Shortcuts
• Files and Paths
  • System Conf
  • Runtime
  • Share Install
  • Init and PAM
• Troubleshooting
  • Greeter Never Appears
  • No Screens Found
  • PAM Failures
  • Wrong Session After Login
  • Setuid and Nobody
• Copyright

Command Line

Helpers are documented in Enable and Disable Helpers. This page is the daemon, greeter, and authcheck binaries.

cylogind

cylogind [OPTION]...

Display manager (root side). Never opens an X display itself. Reads Xservers, starts X, runs greeter, authenticates, starts session.

• --config P -- master conf (default /etc/cyanotype/cylogin.conf)
• --servers P -- Xservers file
• --authdir P -- per-display cookie dir
• --pidfile P -- pidfile + single-instance lock
• --greeter P -- path to cylogin-greeter
• --greeter-user U -- unprivileged greeter account
• --display D -- manage just this display (overrides Xservers)
• --server CMD -- X server command for --display
• --scripts P -- Xsetup/Xstartup/Xsession/Xreset directory
• --session C -- session command run as the user
• --nodaemon -- stay in the foreground
• --once -- one session per display, then exit (test rigs)
• --xdmcp -- answer XDMCP queries (UDP 177; needs root)
• --xdmcp-port N -- listen on N instead of 177
• --xaccess P -- access control file
• --keep-domain -- do not strip our own domain from display names
• --ping SEC -- probe remote displays every SEC (0 = off)
• -h, --help / -V, --version / --selftest
• --log SPEC / -v / -q

Examples:

cylogind --nodaemon --once --display :1
cylogind --config /etc/cyanotype/cylogin.conf

SysV: /etc/init.d/cylogind start. NetBSD: /etc/rc.d/cylogind onestart.

cylogin Greeter

cylogin [OPTION]...
cylogin-greeter [OPTION]...

Motif greeter face. Under cylogind, auth is live on fd 3. Standalone: face-only picker.

• --lock -- session lock for the real uid only
• --lock-timeout SEC -- unlock wait (default 120; 0=forever; exit 2 on timeout for cysaver)
• --demo -- twenty fantasy users; no real accounts; no auth
• --canonical -- measured clogin geometry (710x710); look only
• --selftest -- headless hostname/masking/account checks
• -h, --help / -V, --version
• --log SPEC / -v / -q

Help button opens this book (cy_help_spawn CyLogin).

cylogin-authcheck

Setuid root helper. On the lock path it verifies the password for getuid() only (stdin password protocol). Must be mode 4755 and owned root:root (Linux) or root:wheel (BSD). cylogin-enable --fix-privs sets that. If it is not setuid, lock unlock and some auth paths fail closed.

cychooser

XDMCP chooser face when cylogind is answering chooser requests. Not required for a local :0 seat. See Xaccess and --xdmcp on cylogind.