kopia lustrzana https://gitlab.com/sane-project/website
204 wiersze
9.2 KiB
HTML
204 wiersze
9.2 KiB
HTML
<HTML>
|
|
<HEAD>
|
|
<TITLE>saned.8</TITLE>
|
|
</HEAD>
|
|
<BODY BGCOLOR=#FFFFFF TEXT=#000000><H1 ALIGN=CENTER><IMG SRC="/images/sane.png" HEIGHT=117 WIDTH=346></H1>
|
|
<H1>saned.8</H1>
|
|
<HR>
|
|
<PRE>
|
|
<!-- Manpage converted by man2html 3.0.1 -->
|
|
<B><A HREF="saned.8.html">saned(8)</A></B> SANE Scanner Access Now Easy <B><A HREF="saned.8.html">saned(8)</A></B>
|
|
|
|
|
|
</PRE>
|
|
<H2>NAME</H2><PRE>
|
|
saned - SANE network daemon
|
|
|
|
|
|
</PRE>
|
|
<H2>SYNOPSIS</H2><PRE>
|
|
<B>saned</B> <B>[</B> <B>-a</B> <I>[</I> <I>username</I> <I>]</I> <B>]</B> <B>[</B> <B>-u</B> <I>username</I> <B>]</B> <B>[</B> <B>-b</B> <I>address</I> <B>]</B> <B>[</B> <B>-p</B> <I>port</I> <B>]</B> <B>[</B>
|
|
<B>-l</B> <B>]</B> <B>[</B> <B>-D</B> <B>]</B> <B>[</B> <B>-o</B> <B>]</B> <B>[</B> <B>-d</B> <I>n</I> <B>]</B> <B>[</B> <B>-e</B> <B>]</B> <B>[</B> <B>-h</B> <B>]</B> <B>[</B> <B>-B</B> <I>buffer-size</I> <B>]</B>
|
|
|
|
|
|
</PRE>
|
|
<H2>DESCRIPTION</H2><PRE>
|
|
<B>saned</B> is the SANE (Scanner Access Now Easy) daemon that allows remote
|
|
clients to access image acquisition devices available on the local
|
|
host.
|
|
|
|
|
|
</PRE>
|
|
<H2>OPTIONS</H2><PRE>
|
|
<B>saned</B> recognises the following options:
|
|
|
|
<B>-a</B> <I>[username]</I>, <B>--alone</B>[=<I>username]</I>
|
|
is equivalent to the combination of <B>-l</B> <B>-D</B> <B>-u</B> <I>username</I> options.
|
|
However, <I>username</I> is optional and running user will only be set
|
|
when specified.
|
|
|
|
<B>-u</B> <I>username</I>, <B>--user</B>=<I>username</I>
|
|
requests that <B>saned</B> drop root privileges and run as the user
|
|
(and group) associated with <I>username</I> after binding.
|
|
|
|
<B>-b</B> <I>address</I>, <B>--bind</B>=<I>address</I>
|
|
tells <B>saned</B> to bind to the <I>address</I> given.
|
|
|
|
<B>-p</B> <I>port</I>, <B>--port=</B><I>port</I>
|
|
tells <B>saned</B> to listen on the <I>port</I> given. A value of 0 tells
|
|
<B>saned</B> to pick an unused port. The default is the <B>sane-port</B>
|
|
<B>(6566).</B>
|
|
|
|
<B>-l</B>, <B>--listen</B>
|
|
requests that <B>saned</B> run in standalone daemon mode. In this
|
|
mode, <B>saned</B> will listen for incoming client connections; <B>in-</B>
|
|
<B><A HREF="etd.8.html">etd(8)</A></B> is not required for <B>saned</B> operations in this mode.
|
|
|
|
<B>-D</B>, <B>--daemonize</B>
|
|
will request <B>saned</B> to detach from the console and run in the
|
|
background.
|
|
|
|
<B>-o</B>, <B>--once</B>
|
|
requests that <B>saned</B> exits after the first client disconnects.
|
|
This is useful for debugging.
|
|
|
|
<B>-d</B> <I>n</I>, <B>--debug</B>=<I>n</I>
|
|
sets the level of <B>saned</B> debug output to <I>n</I>. When compiled with
|
|
debugging enabled, this flag may be followed by a number to re-
|
|
quest more or less debug info. The larger the number, the more
|
|
verbose the debug output. E.g., <B>-d128</B> will request output of
|
|
all debug info. A level of 0 produces no output at all. The
|
|
default value is 2.
|
|
|
|
<B>-e</B>, <B>--stderr</B>
|
|
will divert <B>saned</B> debug output to stderr instead of the syslog
|
|
default.
|
|
|
|
<B>-B</B>, <B>--buffer-size=</B><I>buffer-size</I>
|
|
specifies the size of the read buffer used for communication
|
|
with the backend in KB. Default value is 1MB.
|
|
|
|
<B>-h</B>, <B>--help</B>
|
|
displays a short help message.
|
|
|
|
|
|
</PRE>
|
|
<H2>CONFIGURATION</H2><PRE>
|
|
The <I>saned.conf</I> configuration file contains both options for the daemon
|
|
and the access list.
|
|
|
|
<B>data_portrange</B> = <I>min</I><B>_</B><I>port</I> - <I>max</I><B>_</B><I>port</I>
|
|
Specify the port range to use for the data connection. Pick a
|
|
port range between 1024 and 65535; don't pick a too large port
|
|
range, as it may have performance issues. Use this option if
|
|
your <B>saned</B> server is sitting behind a firewall. If that firewall
|
|
is a Linux machine, we strongly recommend using the Netfilter
|
|
<I>nf</I><B>_</B><I>conntrack</I><B>_</B><I>sane</I> module instead.
|
|
|
|
<B>data_connect_timeout</B> = <I>timeout</I>
|
|
Specify the time in milliseconds that <B>saned</B> will wait for a data
|
|
connection. Without this option, if the data connection is not
|
|
done before the scanner reaches the end of scan, the scanner
|
|
will continue to scan past the end and may damage it depending
|
|
on the backend. Specify zero to have the old behavior. The de-
|
|
fault is 4000ms.
|
|
|
|
The access list is a list of host names, IP addresses or IP subnets
|
|
(CIDR notation) that are permitted to use local SANE devices. IPv6 ad-
|
|
dresses must be enclosed in brackets, and should always be specified in
|
|
their compressed form. Connections from localhost are always permitted.
|
|
Empty lines and lines starting with a hash mark (#) are ignored. A line
|
|
containing the single character ``+'' is interpreted to match any host-
|
|
name. This allows any remote machine to use your scanner and may
|
|
present a security risk, so this shouldn't be used unless you know what
|
|
you're doing.
|
|
|
|
A sample configuration file is shown below:
|
|
|
|
# Daemon options
|
|
data_portrange = 10000 - 10100
|
|
# Access list
|
|
scan-client.somedomain.firm
|
|
# this is a comment
|
|
192.168.0.1
|
|
192.168.2.12/29
|
|
[::1]
|
|
[2001:db8:185e::42:12]/64
|
|
|
|
The case of the host names does not matter, so AHost.COM is considered
|
|
identical to ahost.com.
|
|
|
|
|
|
</PRE>
|
|
<H2>FILES</H2><PRE>
|
|
<I>/etc/hosts.equiv</I>
|
|
The hosts listed in this file are permitted to access all local
|
|
SANE devices. Caveat: this file imposes serious security risks
|
|
and its use is not recommended.
|
|
|
|
<I>/usr/local/etc/sane.d/saned.conf</I>
|
|
Contains a list of hosts permitted to access local SANE devices
|
|
(see also description of <B>SANE_CONFIG_DIR</B> below).
|
|
|
|
<I>/usr/local/etc/sane.d/saned.users</I>
|
|
If this file contains lines of the form
|
|
|
|
user:password:backend
|
|
|
|
access to the listed backends is restricted. A backend may be
|
|
listed multiple times for different user/password combinations.
|
|
The server uses MD5 hashing if supported by the client.
|
|
|
|
|
|
</PRE>
|
|
<H2>ENVIRONMENT</H2><PRE>
|
|
<B>SANE_CONFIG_DIR</B>
|
|
This environment variable specifies the list of directories that
|
|
may contain the configuration file. On *NIX systems, the direc-
|
|
tories are separated by a colon (`:'), under OS/2, they are sep-
|
|
arated by a semi-colon (`;'). If this variable is not set, the
|
|
configuration file is searched in two default directories:
|
|
first, the current working directory (".") and then in <I>/usr/lo-</I>
|
|
<I>cal/etc/sane.d</I>. If the value of the environment variable ends
|
|
with the directory separator character, then the default direc-
|
|
tories are searched after the explicitly specified directories.
|
|
For example, setting <B>SANE_CONFIG_DIR</B> to "/tmp/config:" would re-
|
|
sult in directories <I>tmp/config</I>, <I>.</I>, and <I>/usr/local/etc/sane.d</I> be-
|
|
ing searched (in this order).
|
|
|
|
|
|
</PRE>
|
|
<H2>NOTES</H2><PRE>
|
|
<B>saned</B> does <I>not</I> provide confidentiality when communicating with clients.
|
|
If <B>saned</B> is exposed directly on the network, other users may be able to
|
|
intercept scanned images, or learn passwords for connecting to <B>saned</B>,
|
|
with little effort. Client systems should connect to <B>saned</B> through a
|
|
secure tunnel to the server instead.
|
|
|
|
<B>saned</B> is not a trusted program and should not run with root privileges.
|
|
|
|
Refer to <I>/usr/local/share/doc/sane-backends/saned/saned.install.md</I> for
|
|
details on configuring <B>saned</B> as a service.
|
|
|
|
|
|
</PRE>
|
|
<H2>SEE ALSO</H2><PRE>
|
|
<B><A HREF="sane.7.html">sane(7)</A></B>, <B><A HREF="scanimage.1.html">scanimage(1)</A></B>, <B><A HREF="xscanimage.1.html">xscanimage(1)</A></B>, <B><A HREF="xcam.1.html">xcam(1)</A></B>, <B><A HREF="sane-dll.5.html">sane-dll(5)</A></B>,
|
|
<B><A HREF="sane-net.5.html">sane-net(5)</A></B>, <B>sane-"backendname"</B>(5), <B><A HREF="inetd.8.html">inetd(8)</A></B>, <B><A HREF="xinetd.8.html">xinetd(8)</A></B>, <B><A HREF="systemd.1.html">systemd(1)</A></B>
|
|
<I>http://www.penguin-breeder.org/?page=sane-net</I>
|
|
|
|
|
|
</PRE>
|
|
<H2>AUTHOR</H2><PRE>
|
|
David Mosberger
|
|
|
|
29 Sep 2017 <B><A HREF="saned.8.html">saned(8)</A></B>
|
|
</PRE>
|
|
<HR>
|
|
<ADDRESS>
|
|
Man(1) output converted with
|
|
<a href="http://www.oac.uci.edu/indiv/ehood/man2html.html">man2html</a>
|
|
</ADDRESS>
|
|
</BODY>
|
|
</HTML>
|