2000-07-01 14:32:24 +00:00
|
|
|
.TH TINCD 8 "June 2000" "tinc version 1.0pre3" "FSF"
|
|
|
|
.SH NAME
|
|
|
|
tinc \- tinc VPN daemon
|
|
|
|
.SH SYNOPSIS
|
|
|
|
.B tincd
|
|
|
|
[\fIoption\fR]...
|
|
|
|
.SH DESCRIPTION
|
|
|
|
.PP
|
|
|
|
|
|
|
|
This is the daemon of tinc, a secure virtual private
|
|
|
|
network (VPN) project. When started, tincd will read
|
2000-10-30 00:22:54 +00:00
|
|
|
it's configuration file to determine what virtual subnets
|
2000-07-01 14:32:24 +00:00
|
|
|
it has to serve and to what other tinc daemons it should connect.
|
2000-10-30 00:22:54 +00:00
|
|
|
It will connect to the ethertap or tun/tap device and set up a socket
|
|
|
|
for incomming connections.
|
2000-07-01 14:32:24 +00:00
|
|
|
If that succeeds, it will detach from the controlling terminal and
|
|
|
|
continue in the background, accepting and setting up connections to other
|
|
|
|
tinc daemons that are part of the virtual private network.
|
|
|
|
|
|
|
|
.SH OPTIONS
|
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fB\-c\fR, \fB\-\-config\fR=\fIDIR\fR
|
|
|
|
Read configuration options from DIR.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fB\-D\fR, \fB\-\-no\-detach\fR
|
2000-10-30 00:22:54 +00:00
|
|
|
Don't fork and detach. This will also disable the automatic
|
|
|
|
restart mechanism for fatal errors.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fB\-d\fR
|
2000-10-30 00:22:54 +00:00
|
|
|
Increase debug level (see below).
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fB\-k\fR, \fB\-\-kill\fR
|
|
|
|
Attempt to kill a running tincd and exit.
|
|
|
|
.TP
|
|
|
|
\fB\-n\fR, \fB\-\-net\fR=\fINETNAME\fR
|
|
|
|
Connect to net NETNAME.
|
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fB\-K\fR, \fB\-\-generate-key\fR[=\fIBITS]\fR
|
|
|
|
Generate public/private RSA keypair and exit. If BITS is omitted,
|
|
|
|
the default length will be 1024 bits.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fB\-\-help\fR
|
2000-10-30 00:22:54 +00:00
|
|
|
Display short list of options.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fB\-\-version\fR
|
|
|
|
Output version information and exit.
|
|
|
|
.PP
|
|
|
|
.SH "SIGNALS"
|
|
|
|
.TP
|
|
|
|
\fBHUP\fR
|
|
|
|
Closes all connections, rereads the configuration file and restarts the daemon.
|
|
|
|
.TP
|
|
|
|
\fBINT\fR
|
|
|
|
Closes all connections and quits.
|
|
|
|
.TP
|
|
|
|
\fBUSR1\fR
|
|
|
|
Dumps the connection list to syslog.
|
|
|
|
.TP
|
|
|
|
\fBUSR2\fR
|
2000-10-30 00:22:54 +00:00
|
|
|
Dumps the subnet list to syslog.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fBALRM\fR
|
|
|
|
Forces tincd to try to connect to an uplink immediately. Usually tincd attempts
|
|
|
|
to do this itself, but increases the time it waits between the attempts each time
|
|
|
|
it failed, and if tincd didn't succeed to connect to an uplink the first time after
|
|
|
|
it started, it defaults to the maximum time of 15 minutes.
|
|
|
|
.PP
|
|
|
|
.SH "DEBUG LEVELS"
|
|
|
|
The tinc daemon can send a lot of messages to the syslog. The more \fB\-d\fR options are
|
|
|
|
given to tincd, the more messages it will log. Each level inherits all messages of the
|
|
|
|
previous level:
|
|
|
|
.TP
|
|
|
|
\fIno debug options\fR
|
|
|
|
This will log a message indicating tincd has started along with a version number.
|
|
|
|
It will also any serious error.
|
|
|
|
.TP
|
|
|
|
\fB\-d\fR
|
|
|
|
This will log all connections that are made with other tinc daemons.
|
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fB\-dd\fR
|
|
|
|
This will log status and error messages from other tinc daemons.
|
|
|
|
.TP
|
|
|
|
\fB\-ddd\fR
|
2000-07-01 14:32:24 +00:00
|
|
|
This will log all requests that are exchanged with other tinc daemons. These include
|
|
|
|
authentication, key exchange and connection list updates.
|
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fB\-dddd\fR
|
2000-07-01 14:32:24 +00:00
|
|
|
This will log a copy of everything received on the meta socket.
|
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fB\-ddddd\fR
|
|
|
|
This will log all network traffic over the virtual private network.
|
2000-07-01 14:32:24 +00:00
|
|
|
.PP
|
|
|
|
.SH "FILES"
|
|
|
|
.TP
|
|
|
|
\fI/etc/tinc/<NETNAME>/tinc.conf\fR
|
2000-10-30 00:22:54 +00:00
|
|
|
The configuration file for tincd. This should also contain the private RSA key.
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fI/etc/tinc/<NETNAME>/hosts/*\fR
|
|
|
|
The directory containing the host configuration files
|
|
|
|
used to authenticate other tinc daemons. They contain
|
|
|
|
the public RSA keys of other hosts.
|
2000-07-01 14:32:24 +00:00
|
|
|
.PP
|
|
|
|
.SH "BUGS"
|
|
|
|
Maintaining a connection list on each tinc daemon that can connect and disconnect at any
|
|
|
|
moment, and making sure that all connections satisfy the tree property isn't easy. Although
|
|
|
|
we have done a lot to make sure tinc is sturdy and foolproof, it might happen that
|
|
|
|
some connection lists get corrupted.
|
|
|
|
.PP
|
2000-10-30 00:22:54 +00:00
|
|
|
\fBThe cryptography in tinc is not well tested yet. Use it at your own risk!\fR
|
|
|
|
.PP
|
2000-07-01 14:32:24 +00:00
|
|
|
If you find any bugs, report them to tinc@nl.linux.org.
|
|
|
|
.PP
|
|
|
|
.SH "TODO"
|
2000-10-30 00:22:54 +00:00
|
|
|
A lot, especially security auditting.
|
2000-07-01 14:32:24 +00:00
|
|
|
.PP
|
|
|
|
.SH "SEE ALSO"
|
2000-10-30 00:22:54 +00:00
|
|
|
\fBtinc.conf\fR(5)
|
2000-07-01 14:32:24 +00:00
|
|
|
.TP
|
|
|
|
\fBhttp://tinc.nl.linux.org/\fR
|
|
|
|
.TP
|
|
|
|
\fBhttp://www.cabal.org/\fR
|
|
|
|
.PP
|
|
|
|
The full documentation for
|
|
|
|
.B tinc
|
|
|
|
is maintained as a Texinfo manual. If the
|
|
|
|
.B info
|
|
|
|
and
|
|
|
|
.B tinc
|
|
|
|
programs are properly installed at your site, the command
|
|
|
|
.IP
|
|
|
|
.B info tinc
|
|
|
|
.PP
|
|
|
|
should give you access to the complete manual.
|
|
|
|
.PP
|
|
|
|
tinc comes with ABSOLUTELY NO WARRANTY. This is free software,
|
|
|
|
and you are welcome to redistribute it under certain conditions;
|
|
|
|
see the file COPYING for details.
|
2000-07-01 14:40:56 +00:00
|
|
|
.SH "AUTHORS"
|
|
|
|
.na
|
|
|
|
.nf
|
|
|
|
Ivo Timmermans <itimmermans@bigfoot.com>
|
|
|
|
Guus Sliepen <guus@sliepen.warande.net>
|
|
|
|
|
|
|
|
And thanks to many others for their contributions to tinc!
|
|
|
|
.PP
|