cr1 Bilateral Authentication Scheme

Registering cr1 with a port monitor

To protect a local service with cr1, you must instruct the port monitor associated with the service to use cr1 to authenticate any remote client attempting to gain access. To do this, you must add cr1 to the ``scheme'' field of the service's entry in the port monitor's _pmtab file.

To specify cr1 in the ``scheme'' field of a file entry, type:

pmadm -S "cr1 -s servicetag"

NOTE: For more information about port monitors and the _pmtab file, see pmadm(1M) and ``Administering port services''. This topic includes specific instructions for editing _pmtab using the pmadm command.

Typically, cr1 in the role of the imposer is invoked with the -s option; however, a number of options are supported. For a complete list of options, see cr1(1Mbnu).