summaryrefslogtreecommitdiffstats
path: root/man
diff options
context:
space:
mode:
authorAdrian Vovk <adrianvovk@gmail.com>2024-02-01 17:43:48 +0100
committerLuca Boccassi <bluca@debian.org>2024-03-23 02:05:13 +0100
commit5ec87d577f92effe27a62e965e02a6f9a40f81cc (patch)
treed0984780f9c9358ad21eaac19c3c9a6a8527df49 /man
parenthomework: Always upload volume key to keyring (diff)
downloadsystemd-5ec87d577f92effe27a62e965e02a6f9a40f81cc.tar.xz
systemd-5ec87d577f92effe27a62e965e02a6f9a40f81cc.zip
homework: Accept volume key from keyring
This bypasses authentication (i.e. user_record_authenticate) if the volume key was loaded from the keyring and no secret section is provided. This also changes Update() and Resize() to always try and load the volume key from the keyring. This makes the secret section optional for these methods while still letting them function (as long as the home area is active)
Diffstat (limited to 'man')
-rw-r--r--man/org.freedesktop.home1.xml19
1 files changed, 9 insertions, 10 deletions
diff --git a/man/org.freedesktop.home1.xml b/man/org.freedesktop.home1.xml
index 6fe3bb3ce0..726d9d9832 100644
--- a/man/org.freedesktop.home1.xml
+++ b/man/org.freedesktop.home1.xml
@@ -320,10 +320,10 @@ node /org/freedesktop/home1 {
interface.</para>
<para><function>UpdateHome()</function> updates a locally registered user record. Takes a fully
- specified JSON user record as argument (including the <literal>secret</literal> section). A user with a
- matching name and realm must be registered locally already, and the last change timestamp of the newly
- supplied record must be newer than the previously existing user record. Note this operation updates the
- user record only, it does not propagate passwords/authentication tokens from the user record to the
+ specified JSON user record as argument (possibly including the <literal>secret</literal> section). A user
+ with a matching name and realm must be registered locally already, and the last change timestamp of the
+ newly supplied record must be newer than the previously existing user record. Note this operation updates
+ the user record only, it does not propagate passwords/authentication tokens from the user record to the
storage back-end, or resizes the storage back-end. Typically a home directory is first updated, and then
the password of the underlying storage updated using <function>ChangePasswordHome()</function> as well
as the storage resized using <function>ResizeHome()</function>. This method is equivalent to
@@ -338,13 +338,12 @@ node /org/freedesktop/home1 {
on the <classname>org.freedesktop.home1.Home</classname> interface.</para>
<para><function>ResizeHome()</function> resizes the storage associated with a user record. Takes a user
- name, a disk size in bytes and a user record consisting only of the <literal>secret</literal> section
- as argument. If the size is specified as <constant>UINT64_MAX</constant> the storage is resized to the
- size already specified in the user record. Typically, if the user record is updated using
+ name, a disk size in bytes, and optionally a user record consisting only of the <literal>secret</literal>
+ section as arguments. If the size is specified as <constant>UINT64_MAX</constant> the storage is resized to
+ the size already specified in the user record. Typically, if the user record is updated using
<function>UpdateHome()</function> above this is used to propagate the size configured there-in down to
- the underlying storage back-end. This method is equivalent to
- <function>Resize()</function> on the <classname>org.freedesktop.home1.Home</classname>
- interface.</para>
+ the underlying storage back-end. This method is equivalent to <function>Resize()</function> on the
+ <classname>org.freedesktop.home1.Home</classname> interface.</para>
<para><function>ChangePasswordHome()</function> changes the passwords/authentication tokens of a home
directory. Takes a user name, and two JSON user record objects, each consisting only of the