There has been a discussion over on openafs-docs about vos online/offline & hidden commands -- there is a desire to have all commands and all options documented and visible for consistency's sake, although the documentation may note where a command is dangerous or requires special privileges.
I did a quick check of the source and found the following CMD_HIDDEN commands: - cmd.c: all commands have hidden 'version', and 'help' flags. - admin_tools.c: kas setkey - admin_tools.c: kas getpassword/getpasswd(which I couldn't get to work -- see transcript below) - admin_tools.c: kas getrandomkey - admin_tools.c: kas getticket - admin_tools.c: kas debuginfo - fs.c: fs monitor - vos.c: vos online - vos.c: vos offline Jeff Altman suggested I start a discussion of which should be made visible. Apparently some of these commands were made hidden simply because IBM was not permitted to "add new features" at the time the command was added (e.g., vos online/offline), although I don't know the history of these commands. Steven Notes: - kas getpassword: I did not take time to debug this, not knowing if it is even expected to work. It's a side issue that shouldn't detract from the discussion of 'what should be done about hidden commands' -- I include it here for reference: [EMAIL PROTECTED] ]$ tokens Tokens held by the Cache Manager: User's (AFS ID 15) tokens for [EMAIL PROTECTED] [Expires Jun 8 22:31] --End of list-- [EMAIL PROTECTED] ]$ id uid=15(admin) gid=501(admin) groups=501(admin) [EMAIL PROTECTED] ]$ kas getpassword -name admin kas:getpassword: caller not authorized getting admin's password via loopback connection to GetPassword I also tried unsuccessfully as root, with admin's token.
