|File Search||Catalog||Content Search|
A process creates a credential by requesting one from the local MUNGE service. The encoded credential contains the UID and GID of the originating process. This process sends the credential to another process within the security realm as a means of proving its identity. The receiving process validates the credential with the use of its local MUNGE service. The decoded credential provides the receiving process with a reliable means of ascertaining the UID and GID of the originating process, and this information can be used for accounting or access control decisions.
Clients can create and validate these credentials without the use of root privileges, reserved ports, or platform-specific methods.
INTRODUCTION MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defin more»
To use munge, you need to create a secret key file /etc/munge/munge.key, you can run the create-munge-key script as root to generate a random key or follow the instructions in QUICKSTART. You need to securely propagate the secret key file (eg, via ssh) to other hosts within the same security realm. Credentials are valid only within a security realm (ie, on hosts sharing the same secret key). All more»
munge-0.5.9 (2010-03-23): - Changed license to GPLv3+/LGPLv3+. - Fixed bug with failed Linux builds under glibc-2.8+. - Fixed bug with failed daemon starts after clearing /var/run. - Moved selection of authentication method into configure script. - Added support for LOCAL_PEERCRED authentication (BSD, Darwin, GNU/kFreeBSD). - Added support for SHA-512 message digest. munge-0.5.8 (2007-02-05): - F more»
MUNGE(1) MUNGE Uid 'N' Gid Emporium MUNGE(1) NAME munge - MUNGE c more»
REMUNGE(1) MUNGE Uid 'N' Gid Emporium REMUNGE(1) NAME remunge - MUNGE more»
UNMUNGE(1) MUNGE Uid 'N' Gid Emporium UNMUNGE(1) NAME unmunge - MUNGE more»
MUNGE(7) MUNGE Uid 'N' Gid Emporium MUNGE(7) NAME munge - MUNGE o more»
CREATE_MUNGE_KEY(8) MUNGE Uid 'N' Gid Emporium CREATE_MUNGE_KEY(8) NAME create-munge-key more»