1.\" $OpenBSD: tokenadm.8,v 1.6 2007/05/31 19:20:30 jmc Exp $ 2.\" 3.\" Copyright (c) 1996 Berkeley Software Design, Inc. All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 3. All advertising materials mentioning features or use of this software 14.\" must display the following acknowledgement: 15.\" This product includes software developed by Berkeley Software Design, 16.\" Inc. 17.\" 4. The name of Berkeley Software Design, Inc. may not be used to endorse 18.\" or promote products derived from this software without specific prior 19.\" written permission. 20.\" 21.\" THIS SOFTWARE IS PROVIDED BY BERKELEY SOFTWARE DESIGN, INC. ``AS IS'' AND 22.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24.\" ARE DISCLAIMED. IN NO EVENT SHALL BERKELEY SOFTWARE DESIGN, INC. BE LIABLE 25.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31.\" SUCH DAMAGE. 32.\" 33.\" BSDI $From: tokenadm.8,v 1.3 1996/09/06 00:44:07 prb Exp $ 34.\" 35.Dd $Mdocdate: May 31 2007 $ 36.Dt TOKENADM 8 37.Os 38.Sh NAME 39.Nm activadm , 40.Nm cryptoadm , 41.Nm snkadm 42.Nd manage the ActivCard, CRYPTOCard and SNK-004 token databases 43.Sh SYNOPSIS 44.Nm tokenadm 45.Op Fl 1BDdEeRrT 46.Op Fl m Oo - Oc Ns Ar mode 47.Op Ar user ... 48.Sh DESCRIPTION 49The 50.Nm tokenadm 51utility displays and edits user entries in the various token databases. 52It may also be invoked as one the following: 53.Nm activadm , cryptoadm , 54or 55.Nm snkadm . 56.Pp 57The options are as follows: 58.Bl -tag -width Ds 59.It Fl 1 60Display users, one per line. 61.It Fl B 62Display users with no banner. 63.It Fl D 64Display disabled users. 65.It Fl d 66Disable users without removing them from the database. 67This prevents the users from authenticating, but does not lose their 68shared secret. 69The 70.Fl m 71flag may also be used with the 72.Fl d 73flag. 74.It Fl E 75Display enabled users. 76.It Fl e 77Enable users. 78This should be used to re-enable users who were disabled by the 79.Fl d 80flag. 81The 82.Fl m 83flag may also be used with the 84.Fl e 85flag. 86.It Xo Fl m 87.Oo - Oc Ns Ar mode 88.Xc 89Add 90[or remove] 91the specified mode of authentication for the user. 92Modes available are decimal (dec), hexadecimal (hex), phonebook (phone), 93and reduced-input (rim). 94Not all modes are available for all types of cards. 95The 96.Fl m 97flag may be used alone or in conjunction with either the 98.Fl d 99or 100.Fl e 101flags. 102Whenever reduced-input mode is set the reduced-input state is reset. 103This should be done if a paper copy of challenge/responses had been 104produced and then misplaced. 105.It Fl R 106Display users in reverse order. 107.It Fl r 108Remove users from the database. 109.It Fl T 110Display users in terse format (only the user names). 111Unless 112.Fl 1 113is also specified, four users will be displayed per line. 114.El 115.Pp 116Use of any of the 117.Fl 1BDERT 118flags precludes the use of any of the 119.Fl demr 120flags. 121The 122.Fl demr 123flags all require at least one 124.Ar user 125argument. 126.Sh SEE ALSO 127.Xr x99token 1 , 128.Xr login.conf 5 , 129.Xr login_token 8 , 130.Xr tokeninit 8 131