NAME

       upserver - Initializes the server portion of the Update Server

SYNOPSIS

       upserver [<directory>+] [-crypt <directory>+]
           [-clear <directory>+] [-auth <directory>+] [-help]

DESCRIPTION

       The upserver command initializes the server portion of the Update Server (the "upserver"
       process). In the conventional configuration, its binary file is located in the
       /usr/lib/openafs directory on a file server machine.

       The upserver command is not normally issued at the command shell prompt but rather placed
       into a file server machine's /etc/openafs/BosConfig file with the bos create command. If
       it is ever issued at the command shell prompt, the issuer must be logged onto a database
       server machine as the local superuser "root".

       The upserver command specifies which of the directories on the local disk are eligible for
       distribution in response to requests from the client portion of the Update Server (the
       upclient process) running on other machines. If no directories are specified, the upserver
       process distributes the contents of any directory on its local disk.

       The upserver process can distribute a directory's contents in encrypted or unencrypted
       form. By default, it does not use encryption unless an upclient process requests it (this
       default is equivalent to setting the -clear flag). When the -crypt flag is provided, the
       upserver process only fulfills requests for encrypted transfer.

       The upclient and upserver processes always mutually authenticate, whether or not the data
       they pass is encrypted; they use the key with the highest key version number in the
       /etc/openafs/server/KeyFile file to construct a server ticket for mutual authentication.

       This command does not use the syntax conventions of the AFS command suites. Provide the
       command name and all option names in full.

CAUTIONS

       Do not use the Update Server to distribute the contents of the /etc/openafs/server
       directory without the -crypt flag.  The contents of this directory are sensitive.

OPTIONS

       <directory>+
           Names each directory to distribute in unencrypted form (because they appear before the
           first -crypt or -clear flag on the command line). If this argument is omitted, all
           directories on the machine's local disk are eligible for distribution.

       -crypt <directory>+
           Precedes a list of one or more directories that the upserver process distributes only
           in encrypted form.

       -clear <directory>+
           Precedes a list of one or more directories that the upserver process distributes in
           unencrypted form unless the upclient process requests them in encrypted form. Use this
           argument only if a list of directories headed by the -crypt flag precedes it on the
           command line.

       -auth <directory>+
           Precedes a list of one or more directories which the upserver process distributes
           using a form of encryption that is intermediate in complexity and security between the
           unencrypted and encrypted levels set by the -clear and -crypt arguments. Do not use
           this argument, because the upclient process does not have a corresponding argument
           that it can use to request data transfer at this level.

       -help
           Prints the online help for this command. All other valid options are ignored.

EXAMPLES

       The following example bos create command defines and starts an upserver process on the
       host machine "fs1.abc.com". The last parameter (enclosed in quotes) instructs the upserver
       process to distribute the contents of the /usr/lib/openafs directory in unencrypted form
       and the contents of the /etc/openafs/server directory in encrypted form.

          % bos create  -server fs1.abc.com -instance upserver -type simple \
              -cmd "/usr/lib/openafs/upserver /usr/lib/openafs -crypt /etc/openafs/server"

PRIVILEGE REQUIRED

       The issuer must be logged in as the superuser "root" on a file server machine to issue the
       command at a command shell prompt. It is conventional instead to create and start the
       process by issuing the bos create command.

SEE ALSO

       BosConfig(5), bos_create(8), upclient(8)

COPYRIGHT

       IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

       This documentation is covered by the IBM Public License Version 1.0.  It was converted
       from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by
       Alf Wachsmann and Elizabeth Cassell.