Changeset af22057 for postlfs

Timestamp:

08/06/2005 08:06:34 PM (19 years ago)

Author:

Larry Lawrence <larry@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

6aeeb90

Parents:

d6f100c

Message:

verified instructions to MIT-krb5

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4889 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/mitkrb.xml (modified) (11 diffs)

postlfs/security/mitkrb.xml

@@ -58 +58 @@
       </listitem>
     </itemizedlist>
-<!--
+
     <bridgehead renderas="sect3">MIT Krb5 Dependencies</bridgehead>
 
@@ -73 +73 @@
       KDC server.</para>
     </note>
--->
+
   </sect2>
 
@@ -85 +85 @@
     package.</para></note> 
     
-<!--
+
     <para><application>MIT krb5</application> is distributed in a
     TAR file containing a compressed TAR package and a detached PGP
@@ -107 +107 @@
 
 <screen role="root"><userinput>make install &amp;&amp;
-mv -v /bin/login /bin/login.shadow &amp;&amp;
-cp -v /usr/sbin/login.krb5 /bin/login &amp;&amp;
 mv -v /usr/bin/ksu /bin &amp;&amp;
 mv -v /usr/lib/libkrb5.so.3* /lib &amp;&amp;
@@ -121 +119 @@
 ln -v -sf ../../lib/libcom_err.so.3 /usr/lib/libcom_err.so &amp;&amp;
 ldconfig</userinput></screen>
--->
+
+    <para>Without <application>Linux-Pam</application>, the following
+should be entered, also as the <systemitem class="username">root</systemitem> user:</para>
+
+<screen role="root"><userinput>mv -v /bin/login /bin/login.shadow &amp;&amp;
+cp -v /usr/sbin/login.krb5 /bin/login</userinput></screen>
+
+    <para>If <application>Cracklib</application> is installed or if any
+word list has been put in <filename class=directory>/usr/share/dict</filename>, the following
+should be entered, also as the <systemitem class="username">root</systemitem> us
+er:</para>
+
+<screen role="root"><userinput>sn -s /usr/share/dict/words
+/var/lib/krb5kdc/kadmin.dict</userinput></screen>
+
+
   </sect2>
 
@@ -127 +140 @@
     <title>Command Explanations</title>
     <para></para>
-<!--
+
     <para><parameter>- -enable-dns</parameter>: This switch allows
     realms to be resolved using the DNS server.</para>
@@ -146 +159 @@
     to <filename class="directory">/lib</filename> to allow logins without
     mounting <filename class="directory">/usr</filename>.</para>
--->
+
   </sect2>
 
@@ -152 +165 @@
     <title>Configuring MIT Krb5</title>
     <para></para>
-<!--
+
     <sect3 id="krb5-config">
       <title>Config Files</title>
@@ -231 +244 @@
 
 <screen role="root"><userinput>kadmin.local
-<prompt>kadmin:</prompt> addprinc <replaceable>[loginname]</replaceable></userinput></screen>
+<prompt>kadmin:</prompt> add_policy dict-only
+<prompt>kadmin:</prompt> addprinc -policy dict-only <replaceable>[loginname]</replaceable></userinput></screen>
 
         <para>The KDC server and any machine running kerberized
@@ -347 +361 @@
     <title>Contents</title>
     <para></para>
-<!--
+
     <segmentedlist>
       <segtitle>Installed Programs</segtitle>
@@ -715 +729 @@
 
     </variablelist>
--->
+
   </sect2>