81bf447722
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect protocol provides a dual TCP/UDP VPN channel, and uses the standard IETF security protocols to secure it. Both IPv4 and IPv6 are supported. Ocserv's main features are security through provilege separation and sandboxing, accounting, and resilience due to a combined use of TCP and UDP. Authentication occurs in an isolated security module process, and each user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents data leak (e.g., heartbleed-style attacks), and privilege escalation due to any bug on the VPN handling (worker) process. A management interface allows for viewing and querying logged-in users. WWW: http://www.infradead.org/ocserv/ PR: 202253 Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es> Reviewed by: pi
328 lines
4.7 KiB
Text
328 lines
4.7 KiB
Text
# $FreeBSD$
|
|
# Please keep this file sorted by GID!
|
|
# Please pick an empty slot when available and also consider base values from
|
|
# /usr/src/etc/group
|
|
daemon:*:1:
|
|
operator:*:5:amanda
|
|
mail:*:6:postfix,clamav
|
|
ftp:*:14:
|
|
smmsp:*:25:
|
|
video:*:44:
|
|
bind:*:53:
|
|
rdfdb:*:55:
|
|
spamd:*:58:
|
|
unbound:*:59:
|
|
cyrus:*:60:
|
|
proxy:*:62:
|
|
authpf:*:63:
|
|
uucp:*:66:
|
|
xten:*:67:
|
|
dialer:*:68:aprsd
|
|
network:*:69:
|
|
pgsql:*:70:
|
|
ircd:*:72:
|
|
ircservices:*:73:
|
|
simscan:*:74:
|
|
hybserv:*:76:
|
|
audit:*:77:
|
|
virtuoso:*:79:
|
|
www:*:80:
|
|
qnofiles:*:81:
|
|
qmail:*:82:
|
|
mysql:*:88:
|
|
vchkpw:*:89:
|
|
firebird:*:90:
|
|
mailman:*:91:
|
|
gdm:*:92:
|
|
jabber:*:93:
|
|
p4admin:*:94:
|
|
interch:*:95:
|
|
squeuer:*:96:
|
|
mud:*:97:
|
|
msql:*:98:
|
|
rscsi:*:99:
|
|
squid:*:100:
|
|
quagga:*:101:
|
|
ganglia:*:102:
|
|
sgeadmin:*:103:
|
|
slimserv:*:104:
|
|
dnetc:*:105:
|
|
clamav:*:106:
|
|
cacti:*:107:
|
|
webkit:*:108:
|
|
quickml:*:109:
|
|
vscan:*:110:
|
|
fido:*:111:
|
|
dcc:*:112:
|
|
amavis:*:113:
|
|
dhis:*:114:
|
|
_symon:*:115:
|
|
smokeping:*:117:
|
|
ircproxyd:*:118:
|
|
mythtv:*:119:
|
|
pdns:*:120:
|
|
otrs:*:121:
|
|
zabbix:*:122:
|
|
_ntp:*:123:
|
|
fetchmail:*:124:
|
|
postfix:*:125:
|
|
maildrop:*:126:
|
|
nav:*:127:
|
|
sd-agent:*:128:
|
|
vlock:*:129:
|
|
_bgpd:*:130:
|
|
_ospfd:*:131:
|
|
_spamd:*:132:
|
|
freeradius:*:133:
|
|
undernet:*:134:
|
|
rabbitmq:*:135:
|
|
dhcpd:*:136:
|
|
mpd:*:137:
|
|
wolfpack:*:138:
|
|
shellinabox:*:139:
|
|
amanda:*:140:
|
|
ladvd:*:142:
|
|
dovecot:*:143:
|
|
dovenull:*:144:
|
|
webcamd:*:145:
|
|
ventrilo:*:146:
|
|
kdm:*:147:
|
|
ipv6mon:*:148:
|
|
avenger:*:149:
|
|
cbsd:*:150:
|
|
rbldns:*:153:
|
|
trircd:*:154:
|
|
xorp:*:155:
|
|
monetdb:*:156:
|
|
barman:*:157:
|
|
nocat:*:159:
|
|
sfs:*:171:
|
|
agk:*:172:
|
|
polipo:*:173:
|
|
flowtools:*:174:
|
|
twms:*:175:
|
|
gdnsd:*:179:
|
|
rt:*:180:
|
|
nagios:*:181:
|
|
noc:*:182:
|
|
icinga:*:183:
|
|
dnscache:*:184:
|
|
tinydns:*:185:
|
|
dnslog:*:186:
|
|
swift:*:187:
|
|
netxms:*:188:
|
|
leofs:*:189:
|
|
moinmoin:*:192:
|
|
cups:*:193:
|
|
saned:*:194:
|
|
radns:*:195:
|
|
mcserver:*:199:
|
|
sympa:*:200:
|
|
privoxy:*:201:
|
|
dspam:*:202:
|
|
yate:*:204:
|
|
gnugk:*:205:
|
|
gini:*:206:
|
|
_mixminion:*:207:
|
|
shoutcast:*:210:
|
|
git:*:211:
|
|
hg:*:212:
|
|
drizzle:*:213:
|
|
opendnssec:*:215:
|
|
nsd:*:216:
|
|
bs:*:220:
|
|
rtpproxy:*:222:
|
|
postgrey:*:225:
|
|
sqlgrey:*:226:
|
|
kismet:*:229:
|
|
aprsd:*:240:
|
|
tnc:*:241:
|
|
prosody:*:242:
|
|
fcron:*:247:
|
|
_adsuck:*:253:
|
|
_tor:*:256:
|
|
_smtpd:*:257:
|
|
meta1s:*:260:
|
|
meta1q:*:261:
|
|
meta1c:*:262:meta1s
|
|
meta1m:*:263:meta1s,meta1q
|
|
meta1:*:264:
|
|
haclient:*:275:
|
|
frontbase:*:276:
|
|
mrtg:*:279:
|
|
xymon:*:280:
|
|
prelude:*:281:
|
|
spread:*:282:
|
|
devmon:*:283:
|
|
vnstat:*:284:
|
|
exaddos:*:285:exaddos
|
|
rancid:*:286:
|
|
backuppc:*:300:
|
|
_sphinx:*:312:
|
|
dkfilter:*:325:
|
|
smfs:*:326:
|
|
orthanc:*:330:
|
|
daapd:*:337:
|
|
murmur:*:338:
|
|
wildfire:*:340:
|
|
stunnel:*:341:
|
|
openfire:*:342:
|
|
_sabnzbd:*:350:
|
|
_iodined:*:353:
|
|
httptunnel:*:361:
|
|
ldap:*:389:
|
|
tiarra:*:398:
|
|
uhub:*:411:
|
|
drweb:*:426:
|
|
quasselcore:*:442:
|
|
callweaver:*:444:
|
|
ecartis:*:450:
|
|
courier:*:465:
|
|
condor:*:466:
|
|
netmon:*:467:
|
|
slurm:*:468:
|
|
consul:*:469:
|
|
serf:*:470:
|
|
vault:*:471:
|
|
_bbstored:*:505:
|
|
radmind:*:506:
|
|
skkserv:*:507:
|
|
pwhois:*:512:
|
|
nullmail:*:522:
|
|
freevo:*:523:
|
|
dkimproxy:*:525:
|
|
pgbouncer:*:534:
|
|
redis:*:535:
|
|
_flowd:*:542:
|
|
ejabberd:*:543:
|
|
knot:*:553:
|
|
qtss:*:554:
|
|
ircdru:*:555:
|
|
messagebus:*:556:
|
|
pulse-rt:*:557:
|
|
avahi:*:558:
|
|
tacacs:*:559:
|
|
haldaemon:*:560:
|
|
distcc:*:561:
|
|
polkit:*:562:
|
|
pulse:*:563:
|
|
pulse-access:*:564:
|
|
polkitd:*:565:
|
|
assp:*:587:
|
|
avahi-autoipd:*:588:
|
|
_xsi:*:600:
|
|
_tss:*:601:
|
|
_pkcs11:*:602:
|
|
freeswitch:*:610:
|
|
caldavd:*:639:
|
|
monkeysphere:*:641:
|
|
aox:*:666:
|
|
riak:*:667:
|
|
bnetd:*:700:
|
|
bopm:*:717:
|
|
openxpki:*:777:
|
|
zetacoin:*:780:
|
|
foreman_proxy:*:812:
|
|
puppet:*:814:
|
|
btsync:*:817:
|
|
jenkins:*:818:
|
|
rundeck:*:819:
|
|
openacs:*:820:
|
|
dotlrn:*:821:
|
|
polw:*:825:
|
|
statsd:*:826:
|
|
netdisco:*:840:
|
|
tcpcryptd:*:841:
|
|
munin:*:842:
|
|
dahdi:*:843:asterisk
|
|
subsonic:*:844:
|
|
fossy:*:901:www
|
|
scanlogd:*:902:
|
|
_ocserv:*:903:
|
|
influxd:*:907:
|
|
riemann:*:908:
|
|
proxy65:*:909:
|
|
bacula:*:910:
|
|
iserv:*:911:
|
|
_sj3:*:912:
|
|
_relayd:*:913:
|
|
bitlbee:*:914:
|
|
logcheck:*:915:
|
|
ssmtp:*:916:
|
|
prayer:*:917:
|
|
nefu:*:918:
|
|
couchdb:*:919:
|
|
vboxusers:*:920:
|
|
transmission:*:921:
|
|
mongodb:*:922:
|
|
liquidsoap:*:923:
|
|
postpals:*:924:
|
|
mfs:*:925:
|
|
minbif:*:926:
|
|
kumofs:*:927:
|
|
nslcd:*:928:
|
|
activemq:*:929:
|
|
ifgraph:*:930:
|
|
asterisk:*:931:
|
|
sancp:*:932:
|
|
dlna:*:933:
|
|
torrus:*:934:www
|
|
erlyvideo:*:935:
|
|
crtmpserver:*:936:
|
|
get_iplayer:*:937:
|
|
vdr:*:938:
|
|
noip:*:939:
|
|
_tcpproxy:*:940:
|
|
cego:*:941:
|
|
teamspeak:*:942:
|
|
dnetfold:*:943:
|
|
bbs:*:944:
|
|
dbxml:*:945:
|
|
gnokii:*:947:
|
|
dnrd:*:948:
|
|
_lldpd:*:949:
|
|
conquest:*:950:
|
|
openerpd:*:951:
|
|
bitten-slave:*:952:
|
|
_neubot:*:953:
|
|
hadoop:*:955:
|
|
pandora:*:956:
|
|
razorback:*:957:
|
|
gnunet:*:958:
|
|
c_icap:*:959:
|
|
trytond:*:960:
|
|
gearmand:*:961:
|
|
zookeeper:*:962:
|
|
fluentd:*:963:
|
|
git_daemon:*:964:
|
|
elasticsearch:*:965:
|
|
ossec:*:966:
|
|
kippo:*:969:
|
|
colord:*:970:
|
|
shibd:*:971:
|
|
plex:*:972:
|
|
boinc:*:973:
|
|
radicale:*:974:
|
|
unifi:*:975:
|
|
minetest:*:976:
|
|
ums:*:979:
|
|
hbase:*:980:
|
|
uvncrep:*:981:
|
|
bro:*:982:
|
|
syncthing:*:983:
|
|
tvheadend:*:984:
|
|
puppetdb:*:985:
|
|
kamailio:*:986:
|
|
spark:*:987:
|
|
emby:*:989:
|
|
oozie:*:990:
|
|
sguil:*:991:
|
|
hive:*:992:
|
|
kannel:*:993:
|
|
rcynic:*:994:
|
|
rpkirtr:*:995:
|
|
tarantool:*:996:
|
|
bareos:*:997:
|
|
ebnetd:*:999:
|
|
nogroup:*:65533:
|
|
nobody:*:65534:
|