Changeset cc75bcec


Ignore:
Timestamp:
04/29/2004 09:53:08 PM (17 years ago)
Author:
Igor Živković <igor@…>
Branches:
10.0, 10.1, 11.0, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, ken/refactor-virt, krejzi/svn, lazarus, nosym, perl-modules, qt5new, systemd-11177, systemd-13485, trunk, v5_1, v5_1-pre1, xry111/git-date, xry111/git-date-for-trunk, xry111/git-date-test
Children:
960ed11
Parents:
619dd53
Message:

more heimdal fixes

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@2076 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
4 edited

Legend:

Unmodified
Added
Removed
  • index.xml

    r619dd53 rcc75bcec  
    33                        "/usr/share/docbook/docbookx.dtd" [
    44
    5 <!ENTITY version "CVS-20040428">
    6 <!ENTITY releasedate "April 28th, 2004">
    7 <!ENTITY pubdate "2004-04-28">
     5<!ENTITY version "CVS-20040429">
     6<!ENTITY releasedate "April 29th, 2004">
     7<!ENTITY pubdate "2004-04-29">
    88<!ENTITY blfs-version "cvs">
    99
  • introduction/welcome/changelog.xml

    r619dd53 rcc75bcec  
    1111
    1212<itemizedlist>
     13
     14<listitem><para>April 29th, 2004 [igor]: Fixed various errors in
     15Heimdal instructions, caught by Randy, Larry, DJ and
     16Nathan.</para></listitem>
    1317
    1418<listitem><para>April 28th, 2004 [igor]: Finished the Heimdal
  • postlfs/security/heimdal/heimdal-config.xml

    r619dd53 rcc75bcec  
    1414</para>
    1515
    16 <screen><userinput><command>mkdir /etc/heimdal &amp;&amp;
     16<screen><userinput><command>install -d /etc/heimdal &amp;&amp;
    1717cat > /etc/heimdal/krb5.conf << "EOF"</command>
    1818# Begin /etc/heimdal/krb5.conf
     
    2626        kdc = <replaceable>[belgarath.lfs.org]</replaceable>
    2727        admin_server = <replaceable>[belgarath.lfs.org]</replaceable>
     28        kpasswd_server = <replaceable>[belgarath.lfs.org]</replaceable>
    2829    }
    2930
     
    174175</para>
    175176
     177<!--
    176178<para>Install <filename>/etc/rc.d/init.d/heimdal</filename> init script
    177179included in the <xref linkend="intro-important-bootscripts"/>
     
    179181
    180182<screen><userinput><command>make install-heimdal</command></userinput></screen>
     183-->
     184
     185<para>
     186To automate the running of Kerberos server and
     187<command>kpasswdd</command> daemon, use the following command to create
     188the init.d script:
     189</para>
     190
     191<screen><userinput><command>cat > /etc/rc.d/init.d/heimdal << "EOF"</command>
     192#!/bin/sh
     193# Begin $rc_base/init.d/heimdal
     194
     195# Based on sysklogd script from LFS-3.1 and earlier.
     196# Rewritten by Gerard Beekmans  - gerard@linuxfromscratch.org
     197# Heimdal bootscript submitted by Randy McMurchy - LFS-User@mcmurchy.com
     198
     199. /etc/sysconfig/rc
     200. $rc_functions
     201
     202case "$1" in
     203        start) 
     204                echo "Starting KDC Server Daemon..."
     205                if test -f "/var/run/kdc.pid"
     206                then
     207                        print_status warning running
     208                else
     209                        /usr/sbin/kdc &
     210                        sleep 1
     211                        if test -f "/var/run/kdc.pid"
     212                        then
     213                                print_status success
     214                        else
     215                                print_status failure
     216                        fi
     217                fi
     218                echo "Starting KDC kpasswdd Daemon..."
     219                if test -f "/var/run/kpasswdd.pid"
     220                then
     221                        print_status warning running
     222                else
     223                        /usr/sbin/kpasswdd &
     224                        sleep 1
     225                        if test -f "/var/run/kpasswdd.pid"
     226                        then
     227                                print_status success
     228                        else
     229                                print_status failure
     230                        fi
     231                fi
     232                ;;
     233
     234        stop)   
     235                echo "Stopping KDC kpasswdd Daemon..."
     236                killproc /usr/sbin/kpasswdd
     237                echo "Stopping KDC Server Daemon..."
     238                killproc /usr/sbin/kdc
     239                ;;
     240
     241        restart)
     242                $0 stop
     243                sleep 1
     244                $0 start
     245                ;;
     246
     247        status)
     248                statusproc /usr/sbin/kdc
     249                statusproc /usr/sbin/kpasswdd
     250                ;;
     251
     252        *)
     253                echo "Usage: $0 {start|stop|restart|status}"
     254                exit 1
     255                ;;
     256esac
     257
     258# End $rc_base/init.d/heimdal
     259<command>EOF</command></userinput></screen>
     260
     261<para>
     262Create the symbolic links to this file in the relevant <filename
     263class="directory">rc.d</filename> directory with the following commands:
     264</para>
     265
     266<screen><userinput><command>cd /etc/rc.d/init.d &amp;&amp;
     267ln -sf ../init.d/heimdal ../rc0.d/K42heimdal &amp;&amp;
     268ln -sf ../init.d/heimdal ../rc1.d/K42heimdal &amp;&amp;
     269ln -sf ../init.d/heimdal ../rc2.d/K42heimdal &amp;&amp;
     270ln -sf ../init.d/heimdal ../rc3.d/S28heimdal &amp;&amp;
     271ln -sf ../init.d/heimdal ../rc4.d/S28heimdal &amp;&amp;
     272ln -sf ../init.d/heimdal ../rc5.d/S28heimdal &amp;&amp;
     273ln -sf ../init.d/heimdal ../rc6.d/K42heimdal</command></userinput></screen>
    181274
    182275</sect4>
    183276
     277<sect4><title>Using Kerberized Client Programs</title>
     278
     279<para>
     280To use the kerberized client programs (<command>telnet</command>,
     281<command>ftp</command>, <command>rsh</command>,
     282<command>rxterm</command>, <command>rxtelnet</command>,
     283<command>rcp</command>, <command>xnlock</command>), you first must get
     284an authentication ticket. Use the <command>kinit</command> program to
     285get the ticket. After you've acquired the ticket, you can use the
     286kerberized programs to connect to any kerberized server on the network.
     287You will not be prompted for authentication until your ticket expires
     288(default is one day), unless you specify a different user as a command
     289line argument to the program.
     290</para>
     291
     292<para>
     293The kerberized programs will connect to non kerberized daemons, warning
     294you that authentication is not encrypted. As mentioned earlier, only the
     295<command>ftp</command> program gives any trouble connecting to non
     296kerberized daemons.
     297</para>
     298
     299</sect4>
     300
    184301</sect3>
    185302
  • postlfs/security/heimdal/heimdal-intro.xml

    r619dd53 rcc75bcec  
    1111ensure that passwords cannot be stolen. A Kerberos installation will
    1212make changes to the authentication mechanisms on your network and will
    13 overwrite several programs and daemons from the Coreutils, Inetutils and
    14 Shadow packages.
     13overwrite several programs and daemons from the Coreutils, Inetutils,
     14Qpopper and Shadow packages.
    1515</para>
    1616
     
    4141<sect4><title>Optional</title>
    4242<para>
    43 <xref linkend="tcpwrappers"/>,
    4443<xref linkend="readline"/>,
    4544<xref linkend="Linux_PAM"/>,
Note: See TracChangeset for help on using the changeset viewer.