NAME

       unmunge - MUNGE credential decoder

SYNOPSIS

       unmunge [OPTION]...

DESCRIPTION

       The unmunge program validates a MUNGE credential (e.g., one created by the munge program).

       By  default, the credential is read from stdin and the metadata and payload are written to
       stdout.  When the metadata and payload are written to the same stream, they are  separated
       by a blank line.

OPTIONS

       -h, --help
              Display a summary of the command-line options.

       -L, --license
              Display license information.

       -V, --version
              Display version information.

       -i, --input file
              Input the credential from the specified file.

       -n, --no-output
              Discard all output.

       -m, --metadata file
              Output metadata to the specified file.

       -o, --output file
              Output the payload to the specified file.

       -k, --keys string
              Specify  a  subset  of  metadata keys to output.  The keys are case-insensitive and
              delimited by whitespace, commas, semicolons, or periods -- as long as the string is
              treated  as a single argument by the shell (e.g., enclosed by quotes).  If a subset
              is not specified, all available keys are selected by default.

       -K, --list-keys
              Display a list of metadata keys.

       -S, --socket path
              Specify the local domain socket for connecting with munged.

METADATA KEYS

       The following metadata keys are supported.

       STATUS The status of the credential decode operation.

       ENCODE_HOST
              The address of the host on which the credential was encoded.

       ENCODE_TIME
              The time at which the credential was encoded (according to the local clock  of  the
              host that encoded it).

       DECODE_TIME
              The  time  at which the credential was decoded (according to the local clock of the
              host that decoded it).

       TTL    The time-to-live value (in seconds) placed within the credential.

       CIPHER The cipher type used to encode the credential.

       MAC    The MAC type used to encode the credential.

       ZIP    The compression type used to encode the credential.

       UID    The user ID of the process that encoded the credential.

       GID    The group ID of the process that encoded the credential.

       UID_RESTRICTION
              The user ID restriction placed within the credential.

       GID_RESTRICTION
              The group ID restriction placed within the credential.

       LENGTH The length (in bytes) of the payload.

EXIT STATUS

       The  unmunge  program  returns  an  exit  code  corresponding  to  the  return   code   of
       munge_decode().  On success, it returns a zero exit code which signifies the credential is
       valid.  On error, it prints an error message to stderr and returns a non-zero exit code.

AUTHOR

       Chris Dunlap <cdunlap@llnl.gov>

COPYRIGHT

       Copyright (C) 2007-2017 Lawrence Livermore National Security, LLC.
       Copyright (C) 2002-2007 The Regents of the University of California.

       MUNGE is free software: you can redistribute it and/or modify it under the  terms  of  the
       GNU  General Public License as published by the Free Software Foundation, either version 3
       of the License, or (at your option) any later version.

       Additionally for the MUNGE library (libmunge), you can redistribute it  and/or  modify  it
       under the terms of the GNU Lesser General Public License as published by the Free Software
       Foundation, either version 3 of the License, or (at your option) any later version.

SEE ALSO

       munge(1), remunge(1), munge(3), munge_ctx(3), munge_enum(3), munge(7), munged(8).

       https://dun.github.io/munge/