UNMUNGE(1)                MUNGE Uid 'N' Gid Emporium                UNMUNGE(1)




NAME
       unmunge - MUNGE credential decoder


SYNOPSIS
       unmunge [OPTION]...


DESCRIPTION
       The unmunge program validates a MUNGE credential (e.g., one created by
       the munge program).

       By default, the credential is read from stdin and the metadata and
       payload are written to stdout.  When the metadata and payload are
       written to the same stream, they are separated by a blank line.


OPTIONS
       -h, --help
              Display a summary of the command-line options.

       -L, --license
              Display license information.

       -V, --version
              Display version information.

       -i, --input path
              Input the credential from the specified file.

       -n, --no-output
              Discard all output, both metadata and payload.

       -m, --metadata path
              Output metadata to the specified file.

       -o, --output path
              Output the payload to the specified file.

       -k, --keys string
              Specify a subset of metadata keys to output.  The keys are case-
              insensitive and delimited by whitespace, commas, semicolons, or
              periods -- as long as the string is treated as a single argument
              by the shell (e.g., enclosed by quotes).  Invalid keys are
              ignored.  If a subset is not specified, all available keys are
              selected by default.

       -K, --list-keys
              Display a list of metadata keys.

       -N, --numeric
              Display metadata values numerically.  This omits conversions
              from IP addresses to hostnames, seconds to date and time
              strings, UIDs to user names, GIDs to group names, and
              cipher/mac/zip type lookups.

       -S, --socket path
              Specify the local socket for connecting with munged.


METADATA KEYS
       The following metadata keys are supported.

       STATUS The status of the credential decode operation.

       ENCODE_HOST
              The address of the host on which the credential was encoded.

       ENCODE_TIME
              The time at which the credential was encoded (according to the
              local clock of the host that encoded it).

       DECODE_TIME
              The time at which the credential was decoded (according to the
              local clock of the host that decoded it).

       TTL    The time-to-live value (in seconds) placed within the
              credential.

       CIPHER The cipher type used to encode the credential.

       MAC    The MAC type used to encode the credential.

       ZIP    The compression type used to encode the credential.

       UID    The user ID of the process that encoded the credential.

       GID    The group ID of the process that encoded the credential.

       UID_RESTRICTION
              The user ID restriction placed within the credential.

       GID_RESTRICTION
              The group ID restriction placed within the credential.

       LENGTH The length (in bytes) of the payload.


EXIT STATUS
       The unmunge program returns an exit code corresponding to the return
       code of munge_decode().  On success, it returns a zero exit code which
       signifies the credential is valid.  On error, it prints an error
       message to stderr and returns a non-zero exit code.


AUTHOR
       Chris Dunlap <cdunlap@llnl.gov>


COPYRIGHT
       Copyright (C) 2007-2024 Lawrence Livermore National Security, LLC.
       Copyright (C) 2002-2007 The Regents of the University of California.

       MUNGE is free software: you can redistribute it and/or modify it under
       the terms of the GNU General Public License as published by the Free
       Software Foundation, either version 3 of the License, or (at your
       option) any later version.

       Additionally for the MUNGE library (libmunge), you can redistribute it
       and/or modify it under the terms of the GNU Lesser General Public
       License as published by the Free Software Foundation, either version 3
       of the License, or (at your option) any later version.


SEE ALSO
       munge(1), remunge(1), munge(3), munge_ctx(3), munge_enum(3), munge(7),
       munged(8), mungekey(8).

       https://github.com/dun/munge

munge-0.5.16                      2024-03-15                        UNMUNGE(1)