Changeset 2e3e271


Ignore:
Timestamp:
03/21/2008 08:44:45 PM (16 years ago)
Author:
Randy McMurchy <randy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
0f10bc0
Parents:
dce1ca8
Message:

Updated to Heimdal-1.1; removed the Heimdal-Cracklib patches from both packages as Heimdal has been converted to use Cracklib differently; created a patch to change the names of some installed files so they don't conflict with the E2fsprogs package

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@7295 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
4 edited

Legend:

Unmodified
Added
Removed

  • general.ent

    rdce1ca8 r2e3e271  
    44-->
    55
    6 <!ENTITY day          "20">                   <!-- Always 2 digits -->
     6<!ENTITY day          "22">                   <!-- Always 2 digits -->
    77<!ENTITY month        "03">                   <!-- Always 2 digits -->
    88<!ENTITY year         "2008">
    99<!ENTITY version      "svn-&year;&month;&day;">
    10 <!ENTITY releasedate  "March &day;th, &year;">
     10<!ENTITY releasedate  "March &day;nd, &year;">
    1111<!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
    1212<!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
    … …  
    6565<!ENTITY gnupg2-version               "2.0.8">
    6666<!ENTITY tripwire-version             "2.4.0.1">
    67 <!ENTITY heimdal-version              "0.8.1">
     67<!ENTITY heimdal-version              "1.1">
    6868<!ENTITY mitkrb-version               "1.6">
    6969<!ENTITY cyrus-sasl-version           "2.1.22">

  • introduction/welcome/changelog.xml

    rdce1ca8 r2e3e271  
    4242-->
    4343
     44    <listitem>
     45      <para>March 22nd, 2008</para>
     46      <itemizedlist>
     47        <listitem>
     48          <para>[randy] - Updated to Heimdal-1.1. Removed the
     49          Heimdal-Cracklib patches from both packages as Heimdal has been
     50          converted to use Cracklib differently. Created a patch to change
     51          the names of some installed files so they don't conflict with the
     52          E2fsprogs package.</para>
     53        </listitem>
     54      </itemizedlist>
     55    </listitem>
     56
    4457     <listitem>
    4558      <para>March 20th, 2008</para>
    4659      <itemizedlist>
    4760        <listitem>
    48           <para>[thomas] - Added page in chapter 16 about NFS client tools. Upgrade to
    49           nfs-utils-1.1.2 and change the download location.</para>
     61          <para>[thomas] - Added page in chapter 16 about NFS client tools.
     62          Upgrade to nfs-utils-1.1.2 and change the download location.</para>
    5063        </listitem>
    5164      </itemizedlist>

  • postlfs/security/cracklib.xml

    rdce1ca8 r2e3e271  
    6767        <ulink url="&crackdict-download;"/></para>
    6868      </listitem>
    69       <listitem>
     69      <!-- <listitem>
    7070        <para>Required patch to create a library used with the Heimdal
    7171        Kerberos 5 package: <ulink
    7272        url="&patch-root;/cracklib-&cracklib-version;-heimdal-2.patch"/></para>
    73       </listitem>
     73      </listitem> -->
    7474    </itemizedlist>
    7575
    … …  
    112112    <title>Installation of CrackLib</title>
    113113
    114     <para>If desired, apply the <application>Heimdal</application> patch
     114    <!-- <para>If desired, apply the <application>Heimdal</application> patch
    115115    (note that with this patch the original library is not affected; this patch
    116116    only creates an additional library used by the
    … …  
    118118
    119119<screen><userinput>patch -Np1 -i ../cracklib-&cracklib-version;-heimdal-2.patch</userinput></screen>
     120    -->
    120121
    121122    <para>Install <application>CrackLib</application> by running the following
    … …  
    219220        <seg>cracklib-check, cracklib-format, cracklib-packer,
    220221        cracklib-unpacker and create-cracklib-dict</seg>
    221         <seg>libcrack.{so,a} and optionally, libcrack_heimdal.{so,a} and
    222         the cracklibmodule.{so,a} <application>Python</application> module</seg>
     222        <seg>libcrack.{so,a} and the cracklibmodule.{so,a}
     223        <application>Python</application> module</seg>
    223224        <seg>/lib/cracklib, /usr/share/dict and /usr/share/cracklib</seg>
    224225      </seglistitem>

  • postlfs/security/heimdal.xml

    rdce1ca8 r2e3e271  
    55  %general-entities;
    66
    7   <!ENTITY heimdal-download-http "http://ftp.vc-graz.ac.at/mirror/crypto/kerberos/heimdal/heimdal-&heimdal-version;.tar.gz">
     7  <!ENTITY heimdal-download-http "http://www.h5l.org/dist/src/heimdal-&heimdal-version;.tar.gz">
    88  <!ENTITY heimdal-download-ftp  "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-&heimdal-version;.tar.gz">
    9   <!ENTITY heimdal-md5sum        "7ff8c4850bce9702d9d3cf9eff05abaa">
    10   <!ENTITY heimdal-size          "3.1 MB">
    11   <!ENTITY heimdal-buildsize     "127 MB">
    12   <!ENTITY heimdal-time          "3.7 SBU (additional 1.5 SBU to run the test suite)">
     9  <!ENTITY heimdal-md5sum        "7892e97b346534cc9afeeee461fe3bab">
     10  <!ENTITY heimdal-size          "3.6 MB">
     11  <!ENTITY heimdal-buildsize     "136 MB">
     12  <!ENTITY heimdal-time          "4.0 SBU (additional 1.5 SBU to run the test suite)">
    1313]>
    1414
    … …  
    3131
    3232    <para><application>Heimdal</application> is a free implementation
    33     of Kerberos 5 that aims to be compatible with MIT krb5 and is
    34     backward compatible with krb4. Kerberos is a network authentication
     33    of Kerberos 5 that aims to be compatible with MIT Kerberos 5 and is
     34    backward compatible with Kerberos 4. Kerberos is a network authentication
    3535    protocol. Basically it preserves the integrity of passwords in any
    3636    untrusted network (like the Internet). Kerberized applications work
    … …  
    3838    cannot be stolen or compromised. A Kerberos installation will make changes
    3939    to the authentication mechanisms on your network and will overwrite several
    40     programs and daemons from the <application>Coreutils</application>,
    41     <application>Inetutils</application>, <application>Qpopper</application>
    42     and <application>Shadow</application> packages.</para>
     40    programs and daemons from the <application>Shadow</application>,
     41    <application>Inetutils</application> and
     42    <application>Qpopper</application> packages. See
     43    <ulink url="&files-anduin;/heimdal-overwrites"/> for a complete list of
     44    all the files and commands to rename each of them.</para>
    4345
    4446    <bridgehead renderas="sect3">Package Information</bridgehead>
    … …  
    6668    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    6769    <itemizedlist spacing='compact'>
    68       <!-- <listitem>
     70      <listitem>
    6971        <para>Required Patch: <ulink
    70         url="ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt"/></para>
     72        url="&patch-root;/heimdal-&heimdal-version;-blfs_docs-1.patch"/></para>
    7173      </listitem>
    7274      <listitem>
    7375        <para>Required Patch: <ulink
    74         url="&patch-root;/heimdal-&heimdal-version;-fhs_compliance-1.patch"/></para>
    75       </listitem> -->
    76       <listitem>
    77         <para>Required patch for <application>CrackLib</application> support: <ulink
    78         url="&patch-root;/heimdal-&heimdal-version;-cracklib-1.patch"/></para>
     76        url="&patch-root;/heimdal-&heimdal-version;-libss-1.patch"/></para>
    7977      </listitem>
    8078    </itemizedlist>
    … …  
    9492    <para role="optional"><xref linkend="linux-pam"/>,
    9593    <xref linkend="openldap"/>,
    96     <xref linkend="x-window-system"/>,
    97     <xref linkend="cracklib"/> (compiled with the <filename>heimdal</filename> patch),
    98     <ulink url="http://packages.debian.org/stable/source/libcap">libcap</ulink>, and
    99     <ulink url="http://www.pdc.kth.se/kth-krb/">krb4</ulink></para>
     94    <xref linkend="x-window-system"/>, and
     95    <ulink url="http://packages.debian.org/stable/source/libcap">libcap</ulink></para>
    10096
    10197    <note>
    … …  
    114110    <title>Installation of Heimdal</title>
    115111
    116     <!-- This doesn't appear to be needed any longer as testing has
    117          shown that the ftp client now works without issues
    118 
    119     <para>Before installing the package, you may want to preserve the
    120     <command>ftp</command> program from the <application>Inetutils</application>
    121     package. This is because using the <application>Heimdal</application>
    122     <command>ftp</command> program to connect to non-kerberized ftp servers may
    123     not work properly. It will allow you to connect (letting you know that
    124     transmission of the password is clear text) but will have problems doing
    125     puts and gets. Issue the following command as the
    126     <systemitem class="username">root</systemitem> user.</para>
    127 
    128 <screen role="root"><userinput>mv -v /usr/bin/ftp /usr/bin/ftpn</userinput></screen>
    129     -->
    130 
    131112    <warning>
    132113      <para>Ensure you really need a Kerberos installation before you decide
    … …  
    135116    </warning>
    136117
    137     <para>If you wish the <application>Heimdal</application> package to
    138     link against the <application>CrackLib</application> library to provide
    139     enforcement of strong passwords (requires <xref linkend="cracklib"/>
    140     installed with the <filename>heimdal</filename> patch), you must apply a
    141     patch:</para>
    142 
    143 <screen><userinput>patch -Np1 -i ../heimdal-&heimdal-version;-cracklib-1.patch</userinput></screen>
    144 
    145118    <para>Install <application>Heimdal</application> by running the following
    146119    commands:</para>
    147120
    148 <screen><userinput>sed -i 's|/var/heimdal|/var/lib/heimdal|' $(grep -lr /var/heimdal *) &amp;&amp;
    149 ./configure --prefix=/usr \
     121<screen><userinput>./configure --prefix=/usr \
    150122            --sysconfdir=/etc/heimdal \
    151123            --libexecdir=/usr/sbin \
     124            --localstatedir=/var/lib/heimdal \
    152125            --datadir=/var/lib/heimdal \
    153             --localstatedir=/var/lib/heimdal \
     126            --with-hdbdir=/var/lib/heimdal \
    154127            --with-readline=/usr \
    155128            --enable-kcm &amp;&amp;
    156129make</userinput></screen>
    157130
    158     <!-- Docs building is broken - when fixec, insert hyphens in the makeinfo commands
    159131    <para>If you have <xref linkend="tetex"/> installed and wish to create
    160     alternate forms of the documentation, issue any or all of the following
    161     commands:</para>
    162 
    163 <screen><userinput>make -C doc html &amp;&amp;
    164 mv doc/heimdal.html doc/html &amp;&amp;
    165 make -C doc pdf &amp;&amp;
    166 make -C doc ps &amp;&amp;
    167 makeinfo -html -no-split -o doc/heimdal.html doc/heimdal.texi &amp;&amp;
    168 makeinfo -plaintext       -o doc/heimdal.txt  doc/heimdal.texi</userinput></screen>
    169     -->
    170 
    171     <para>To test the results, issue: <command>make check</command>.</para>
     132    alternate forms of the documentation, change into the
     133    <filename class='directory'>doc</filename> directory and issue any or all
     134    of the following commands:</para>
     135
     136<screen><userinput>pushd doc                                        &amp;&amp;
     137
     138make html                                        &amp;&amp;
     139
     140texi2pdf                            heimdal.texi &amp;&amp;
     141texi2dvi                            heimdal.texi &amp;&amp;
     142dvips                -o heimdal.ps  heimdal.dvi  &amp;&amp;
     143makeinfo --plaintext -o heimdal.txt heimdal.texi &amp;&amp;
     144
     145texi2pdf                            hx509.texi   &amp;&amp;
     146texi2dvi                            hx509.texi   &amp;&amp;
     147dvips                -o hx509.ps    hx509.dvi    &amp;&amp;
     148makeinfo --plaintext -o hx509.txt   hx509.texi   &amp;&amp;
     149
     150popd</userinput></screen>
     151
     152    <para>To test the results, issue: <command>make -k check</command>. The
     153    <command>ipropd</command> test is known to fail but all others should
     154    pass.</para>
    172155
    173156    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
    174157
    175 <screen role="root"><?dbfo keep-together="auto"?><userinput>mv -v /usr/include/ss/ss.h   /usr/include/ss/ss.h.e2fsprogs &amp;&amp;
     158<!-- <screen role="root"><?dbfo keep-together="auto"?><userinput>mv -v /usr/include/ss/ss.h   /usr/include/ss/ss.h.e2fsprogs &amp;&amp;
    176159mv -v /usr/lib/libss.a       /usr/lib/libss.a.e2fsprogs &amp;&amp;
    177160mv -v /usr/lib/libss.so      /usr/lib/libss.so.e2fsprogs &amp;&amp;
    178161mv -v /usr/bin/mk_cmds       /usr/bin/mk_cmds.e2fsprogs &amp;&amp;
    179 
    180 make install &amp;&amp;
    181 
    182 mv -v /usr/include/ss/ss.h            /usr/include/ss/ss.h.heimdal &amp;&amp;
     162-->
     163
     164<screen role="root"><userinput>make install &amp;&amp;
     165
     166install -v -m755 -d /usr/share/doc/heimdal-&heimdal-version; &amp;&amp;
     167install -v -m644    doc/{init-creds,layman.asc} \
     168                    /usr/share/doc/heimdal-&heimdal-version; &amp;&amp;
     169
     170ln -sfv         mech.5 /usr/share/man/man5/qop.5  &amp;&amp;
     171ln -sfv ../man5/mech.5 /usr/share/man/cat5/qop.5  &amp;&amp;
     172ln -sfv ../man5/mech.5 /usr/share/man/cat5        &amp;&amp;
     173
     174mv -v /bin/login          /bin/login.SHADOW &amp;&amp;
     175mv -v /bin/su             /bin/su.SHADOW    &amp;&amp;
     176mv -v /usr/bin/{login,su} /bin              &amp;&amp;
     177ln -v -sf ../../bin/login /usr/bin          &amp;&amp;
     178
     179for LINK in   lib{otp,kafs,krb5,hx509,asn1,roken,crypto}; do
     180    mv -v     /usr/lib/${LINK}.so.* /lib &amp;&amp;
     181    ln -v -sf ../../lib/$(readlink  /usr/lib/${LINK}.so) \
     182              /usr/lib/${LINK}.so
     183done &amp;&amp;
     184
     185mv -v     /usr/lib/$(readlink /usr/lib/libdb.so) \
     186          /usr/lib/libdb-?.so \
     187          /lib &amp;&amp;
     188ln -v -sf ../../lib/$(readlink /usr/lib/libdb.so) \
     189          /usr/lib/libdb.so &amp;&amp;
     190
     191ldconfig</userinput></screen>
     192
     193<!-- mv -v /usr/include/ss/ss.h            /usr/include/ss/ss.h.heimdal &amp;&amp;
    183194mv -v /usr/include/ss/ss.h.e2fsprogs  /usr/include/ss/ss.h &amp;&amp;
    184195mv -v /usr/lib/libss.a                /usr/lib/libss.a.heimdal &amp;&amp;
    … …  
    188199mv -v /usr/lib/libss.la               /usr/lib/libss.la.heimdal &amp;&amp;
    189200mv -v /usr/bin/mk_cmds                /usr/bin/mk_cmds.heimdal &amp;&amp;
    190 mv -v /usr/bin/mk_cmds.e2fsprogs      /usr/bin/mk_cmds &amp;&amp;
    191 
    192 mv -v /bin/login          /bin/login.shadow &amp;&amp;
    193 mv -v /bin/su             /bin/su.shadow &amp;&amp;
    194 mv -v /usr/bin/{login,su} /bin &amp;&amp;
    195 ln -v -sf ../../bin/login /usr/bin &amp;&amp;
    196 
    197 for LINK in   lib{otp,kafs,krb5,hx509,asn1,roken,crypto}; do
    198     mv -v     /usr/lib/${LINK}.so.* /lib &amp;&amp;
    199     ln -v -sf ../../lib/$(readlink  /usr/lib/${LINK}.so) \
    200               /usr/lib/${LINK}.so
    201 done &amp;&amp;
    202 
    203 mv -v     /usr/lib/$(readlink /usr/lib/libdb.so) \
    204           /usr/lib/libdb-?.so \
    205           /lib &amp;&amp;
    206 ln -v -sf ../../lib/$(readlink /usr/lib/libdb.so) \
    207           /usr/lib/libdb.so &amp;&amp;
    208 
    209 ldconfig</userinput></screen>
    210 
    211     <!-- <para>If you built any of the alternate forms of documentation, install it
     201mv -v /usr/bin/mk_cmds.e2fsprogs      /usr/bin/mk_cmds &amp;&amp; -->
     202
     203    <para>If you built any of the alternate forms of documentation, install it
    212204    using the following commands as the
    213205    <systemitem class="username">root</systemitem> user:</para>
    214206
    215 <screen role="root"><userinput>install -v -m755 -d /usr/share/doc/heimdal-&heimdal-version;/html &amp;&amp;
    216 install -v -m644    doc/html/* \
    217                     /usr/share/doc/heimdal-&heimdal-version;/html &amp;&amp;
    218 install -v -m644    doc/heimdal.{dvi,ps,pdf,html,txt} \
    219                     /usr/share/doc/heimdal-&heimdal-version;</userinput></screen> -->
     207<screen role="root"><userinput>install -v -m644 doc/{heimdal,hx509}.{dvi,ps,pdf,html,txt} \
     208                 /usr/share/doc/heimdal-&heimdal-version;</userinput></screen>
     209
     210    <para>If you wish to use the <xref linkend="cracklib"/> library to enforce
     211    strong passwords in the KDC database, issue the following commands as the
     212    <systemitem class="username">root</systemitem> user:</para>
     213
     214<screen role="root"><userinput>sed -e 's|/usr/pkg|/usr|' \
     215    -e 's|/usr/lib/cracklib_dict|/lib/cracklib/pw_dict|' \
     216    -e 's|/var/heimdal|/var/lib/heimdal|' \
     217        lib/kadm5/check-cracklib.pl \
     218    > /bin/krb5-check-cracklib.pl &amp;&amp;
     219
     220chmod -v 755 /bin/krb5-check-cracklib.pl</userinput></screen>
    220221
    221222  </sect2>
    … …  
    224225    <title>Command Explanations</title>
    225226
    226     <para><command>sed -i '...' $(grep -lr /var/heimdal *)</command>:
    227     This command is used to change all occurances of hard-coded
    228     <filename class='directory'>/var/heimdal</filename> to
    229     <filename class='directory'>/var/lib/heimdal</filename> so the
    230     installation will be FHS compliant.</para>
    231 
    232     <para><command>mv -v /usr/include/...</command>,
     227    <!-- <para><command>mv -v /usr/include/...</command>,
    233228    <command>mv -v /usr/lib/libss.* ...</command> and
    234229    <command>mv -v /usr/bin/mk_cmds ...</command>: The
    … …  
    239234    original files before the installation, and then restore them (after
    240235    renaming the new <application>Heimdal</application> files) after the
    241     installation.</para>
     236    installation.</para> -->
    242237
    243238    <para><parameter>--libexecdir=/usr/sbin</parameter>: This switch causes
    … …  
    261256    </tip>
    262257
    263     <para><command>mv ... .shadow; mv ... /bin; ln -v -sf ../../bin...</command>:
    264     The <command>login</command> and <command>su</command> programs installed by
     258    <para><parameter>--localstatedir=/var/lib/heimdal</parameter>,
     259    <parameter>--datadir=/var/lib/heimdal</parameter> and
     260    <parameter>--with-hdbdir=/var/lib/heimdal</parameter>: These parameters
     261    are used so that the KDC database and associated files will all reside
     262    in <filename class='directory'>/var/lib/heimdal</filename>.</para>
     263
     264    <para><parameter>--with-readline=/usr</parameter>: This parameter must be
     265    used so that the <command>configure</command> script properly locates the
     266    installed <application>Readline</application> package.</para>
     267
     268    <para><parameter>--enable-kcm</parameter>: This parameter enables building
     269    the Kerberos Credentials Manager.</para>
     270
     271    <para><command>ln -sfv .../mech.5 /usr/share/man/...</command>: These
     272    commands are used to fix some broken symbolic links.</para>
     273
     274    <para><command>mv ... ...SHADOW</command>, <command>mv ... /bin</command>
     275    and <command> ln ... /usr/bin</command>: The <command>login</command>
     276    and <command>su</command> programs installed by
    265277    <application>Heimdal</application> belong in the
    266278    <filename class="directory">/bin</filename> directory. The
    267279    <command>login</command> program is symlinked because
    268280    <application>Heimdal</application> is expecting to find it in
    269     <filename class="directory">/usr/bin</filename>. The old executables are
    270     preserved before the move so that they can be restored if you experience
    271     problems logging into the system after the
    272     <application>Heimdal</application> package is installed and
    273     configured.</para>
    274 
    275     <para><command>mv ... /lib; ln -v -sf ../../lib/lib... /usr/lib...</command>:
    276     The <command>login</command> and <command>su</command> programs installed
    277     by <application>Heimdal</application> link against
     281    <filename class="directory">/usr/bin</filename>. The old executables from
     282    the <application>Shadow</application> package are preserved before the move
     283    so that they can be restored if you experience problems logging into the
     284    system after the <application>Heimdal</application> package is installed
     285    and configured.</para>
     286
     287    <para><command>for LINK in ...; do ...; done</command>,
     288    <command>mv ... /lib</command> and
     289    <command>ln ... /usr/lib/libdb.so</command>: The <command>login</command>
     290    and <command>su</command> programs previously moved into the
     291    <filename class='directory'>/lib</filename> directory link against
    278292    <application>Heimdal</application> libraries as well as libraries provided
    279293    by the <application>OpenSSL</application> and
    280294    <application>Berkeley DB</application> packages. These
    281     libraries are moved to <filename class="directory">/lib</filename> to be
    282     FHS compliant and also in case
     295    libraries are also moved to <filename class="directory">/lib</filename>
     296    so they are FHS compliant and also in case
    283297    <filename class="directory">/usr</filename> is located on a separate
    284298    partition which may not always be mounted.</para>
    … …  
    312326        <title>Master KDC Server Configuration</title>
    313327
    314         <para>Create the Kerberos configuration file with the
    315         following commands:</para>
     328        <para>Many of the commands below use
     329        <replaceable>&lt;replaceable&gt;</replaceable> tags to identify places
     330        where you need to substitute information specific to your network.
     331        Ensure you replace everything in these tags (there will be no angle
     332        brackets when you are done) with your site-specific information.</para>
     333
     334        <para>Create the Kerberos configuration file with the following
     335        commands:</para>
    316336
    317337<screen role="root"><userinput>install -v -m755 -d /etc/heimdal &amp;&amp;
    318 cat &gt; /etc/heimdal/krb5.conf &lt;&lt; "EOF"
     338cat &gt; /etc/heimdal/krb5.conf &lt;&lt; "EOF" &amp;&amp;
    319339<literal># Begin /etc/heimdal/krb5.conf
    320340
    … …  
    349369        domain changed to ALL CAPS. This isn't required, but both
    350370        <application>Heimdal</application> and <application>MIT
    351         krb5</application> recommend it.</para>
     371        Kerberos</application> recommend it.</para>
    352372
    353373        <para><option>encrypt = true</option> provides encryption of all
    … …  
    355375        and can be left off. If you leave it off, you can encrypt all traffic
    356376        from the client to the server using a switch on the client program
    357         instead.</para>
    358 
    359         <para>The <option>[realms]</option> parameters tell the client
    360         programs where to look for the KDC authentication services.</para>
    361 
    362         <para>The <option>[domain_realm]</option> section maps a domain
     377        instead. The <option>[realms]</option> parameters tell the client
     378        programs where to look for the KDC authentication services. The
     379        <option>[domain_realm]</option> section maps a domain
    363380        to a realm.</para>
    364381
    … …  
    452469        of your new <application>Heimdal</application> Kerberos 5
    453470        installation.</para>
     471
     472        <para>If you wish to use the <xref linkend="cracklib"/> library to
     473        enforce strong passwords in the KDC database, you must do two things.
     474        First, add the following lines to the
     475        <filename>/etc/heimdal/krb5.conf</filename> configuration file:</para>
     476
     477<screen><literal>[password_quality]
     478    policies = builtin:external-check
     479    external_program = /bin/krb5-check-cracklib.pl</literal></screen>
     480
     481        <para>Next you must install the
     482        <application>Crypt::Cracklib</application>
     483        <application>Perl</application> module. Download it from the CPAN
     484        site. The URL at the time of this writing is <ulink
     485        url="http://cpan.org/authors/id/D/DA/DANIEL/Crypt-Cracklib-1.2.tar.gz"/>.
     486        After unpacking the tarball and changing into the newly created
     487        directory, issue the following command to add the BLFS
     488        <application>Cracklib</application> dictionary location to one of the
     489        source files:</para>
     490
     491<screen><userinput>sed -i 's|pw_dict|&amp;\n\t\t/lib/cracklib/pw_dict|' Cracklib.pm</userinput></screen>
     492
     493        <para>Then use the standard <command>perl Makefile.PL</command>;
     494        <command>make</command>; <command>make test</command>;
     495        <command>make install</command> commands. Note that one test fails
     496        due to an unknown reason.</para>
    454497
    455498        <para id="heimdal-init">Install the
    … …  
    516559        ipropd-master, ipropd-slave, kadmin, kadmind, kauth, kcm, kdc,
    517560        kdestroy, kdigest, kf, kfd, kgetcred, kimpersonate, kinit, klist,
    518         kpasswd, kpasswdd, krb5-config, kstash, ktutil, kx, kxd, login,
    519         mk_cmds, otp, otpprint, pagsh, pfrom, popper, push, rcp, rsh, rshd,
    520         rxtelnet, rxterm, string2key, su, telnet, telnetd, tenletxr,
    521         verify_krb5_conf and xnlock</seg>
    522         <seg>libasn1.{so,a}, libeditline.{so,a}, libgssapi.{so,a},
    523         libhdb.{so,a}, libheimntlm.{so,a}, libhx509.{so,a},
     561        kpasswd, kpasswdd, krb5-check-cracklib.pl, krb5-config, kstash,
     562        ktutil, kx, kxd, login, mk_cmds-krb5, otp, otpprint, pagsh, pfrom,
     563        popper, push, rcp, rsh, rshd, rxtelnet, rxterm, string2key, su,
     564        telnet, telnetd, tenletxr, verify_krb5_conf and xnlock</seg>
     565
     566        <seg>hdb_ldap.{so,a}, libasn1.{so,a}, libeditline.{so,a},
     567        libgssapi.{so,a}, libhdb.{so,a}, libheimntlm.{so,a}, libhx509.{so,a},
    524568        libkadm5clnt.{so,a}, libkadm5srv.{so,a}, libkafs.{so,a},
    525569        libkdc.{so,a}, libkrb5.{so,a}, libotp.{so,a}, libroken.{so,a},
    526         libsl.{so,a}, libss.{so,a} and windc.{so,a}</seg>
     570        libsl.{so,a}, libss-krb5.{so,a} and windc.{so,a}</seg>
     571
    527572        <seg>/etc/heimdal, /usr/include/gssapi, /usr/include/kadm5,
    528573        /usr/include/krb5, /usr/include/roken, /usr/include/ss,
Note: See TracChangeset for help on using the changeset viewer.