Changeset d8def3f

Timestamp:

05/06/2004 02:42:45 PM (20 years ago)

Author:

Larry Lawrence <larry@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 12.2, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gimp3, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, v5_1, v5_1-pre1, xry111/for-12.3, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/spidermonkey128, xry111/test-20220226, xry111/xf86-video-removal

Children:

71e06e23

Parents:

268c79f

Message:

review modifications to MIT kerberos

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@2103 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:

postlfs/security/mitkrb

Files:

• mitkrb-config.xml (modified) (2 diffs)
• mitkrb-desc.xml (modified) (6 diffs)
• mitkrb-exp.xml (modified) (1 diff)
• mitkrb-intro.xml (modified) (2 diffs)

postlfs/security/mitkrb/mitkrb-config.xml

@@ -1 +1 @@
 <sect2>
-<title>Configuring Heimdal</title>
+<title>Configuring <application><acronym>MIT</acronym> krb5</application></title>
 
 <sect3><title>Config files</title>
@@ -253 +253 @@
 <para>
 The kerberized programs will connect to non kerberized daemons, warning
-you that authentication is not encrypted.</para>
-
+you that authentication is not encrypted.</para></sect4>
+
+
+<sect4><title>Using Kerberized Server Programs</title>
+
+<para>Using kerberized server programs (<command>telnetd</command>,
+<command>kpropd</command>, 
+<command>klogind</command> and <command>kshd</command>) requires two additional configuration steps.
+First the <filename>/etc/services</filename> file must be updated to
+include  eklogin and krb5_prop. Second, the
+<filename>inetd.conf</filename> or <filename>xinetd.conf</filename> must
+be modified for each server that will be activated, usually replacing
+the server from <application>inetutils</application>.</para></sect4>
+
+<sect4><title>Additional Information</title>
 <para>
 For additional information consult <ulink

postlfs/security/mitkrb/mitkrb-desc.xml

@@ -17 +17 @@
 <command>kinit</command>,
 <command>klist</command>,
-<command>klogin</command>,
 <command>klogind</command>,
 <command>kpasswd</command>,
-<command>kpasswdd</command>,
 <command>kprop</command>,
 <command>kpropd</command>,
@@ -65 +63 @@
 
 <sect3><title>compile_et</title>
-<para><command>compile_et</command></para></sect3>
+<para><command>compile_et</command> converts the table listing
+error-code names into a <application>C</application> source file.</para></sect3>
 
 <sect3><title>k5srvutil</title>
-<para><command>k5srvutil</command> </para></sect3>
+<para><command>k5srvutil</command> is a host keytable manipulation
+utility.</para></sect3>
 
 <sect3><title>kadmin</title>
@@ -92 +92 @@
 
 <sect3><title>kdb5_util</title>
-<para><command>kdb5_util</command> </para></sect3>
+<para><command>kdb5_util</command> is the <acronym>KDC</acronym>
+database utility.</para></sect3>
 
 <sect3><title>klist</title>
@@ -98 +99 @@
 the credential cache.</para></sect3>
 
-<sect3><title>klogin</title>
-<para><command>klogin</command></para></sect3>
-
 <sect3><title>klogind</title>
-<para><command>klogind</command></para></sect3>
+<para><command>klogind</command> is the server that responds to rlogin
+requests.</para></sect3>
 
 <sect3><title>kpasswd</title>
 <para><command>kpasswd</command> is a program for changing Kerberos 5
 passwords.</para></sect3>
-
-<sect3><title>kpasswdd</title>
-<para><command>kpasswdd</command> is a Kerberos 5 password changing
-server.</para></sect3>
 
 <sect3><title>kprop</title>
@@ -126 +121 @@
 programs against libraries.</para></sect3>
 
-<sect3><title>kshd</title>
-<para><command>kshd</command> </para></sect3>
+<sect3><title>ksu</title>
+<para><command>ksu</command> is the super user program using Kerberos
+protocol. Requires a properly configured
+<filename>/etc/shells</filename> and <filename>~/.k5login</filename>
+containing principals authorized to become super users.</para></sect3>
 
 <sect3><title>ktutil</title>
@@ -134 +132 @@
 
 <sect3><title>kvno</title>
-<para><command>kvno</command> </para></sect3>
+<para><command>kvno</command> prints keyversion numbers of Kerberos
+principals.</para></sect3>
 
 

postlfs/security/mitkrb/mitkrb-exp.xml

@@ -23 +23 @@
 ln -sf ../../lib/libcom_err.so /usr/lib</command></screen>
 The <command>login</command> and <command>ksu</command> programs
-are linked against these libraries. We move these libraries to <filename
-class="directory">/lib</filename> to allow logins without mounting <filename
-class="directory">/usr</filename>.</para>
+are linked against these libraries, therefore we move these libraries to 
+<filename class="directory">/lib</filename> to allow logins without mounting <filename class="directory">/usr</filename>.</para>
 
 </sect2>

postlfs/security/mitkrb/mitkrb-intro.xml

@@ -1 +1 @@
 <sect2>
-<title>Introduction to <application>MIT krb5</application></title>
+<title>Introduction to <application><acronym>MIT</acronym> krb5</application></title>
 
 <para>
@@ -18 +18 @@
 </sect3>
 
-<sect3><title><application>MIT krb5</application> dependencies</title>
+<sect3><title><application><acronym>MIT</acronym> krb5</application> dependencies</title>
 <sect4><title>Optional</title>
 <para>
-<xref linkend="Linux_PAM"/>,
-<xref linkend="openldap"/> and
-<ulink url="http://www.pdc.kth.se/kth-krb/">krb4</ulink>
+<xref linkend="xinetd"/> (services servers only), 
+<xref linkend="Linux_PAM"/> (for xdm based logins) and
+<xref linkend="openldap"/> (alternative for krb5kdc password database)
 </para>