Changeset f91ceaa for postlfs


Ignore:
Timestamp:
01/11/2007 09:42:15 PM (17 years ago)
Author:
Randy McMurchy <randy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
6cdeafeb
Parents:
cb1ee15f
Message:

Updated to MIT Kerberos V5-1.6; also overhauled the instructions to fit the updated version and included enhancements to the instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6383 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/mitkrb.xml

    rcb1ee15f rf91ceaa  
    55  %general-entities;
    66
    7     <!-- Inserted as a reminder to do this. The mention of a test suite
    8          is usually right before the root user installation commands. Please
    9          delete these 12 (including one blank) lines after you are done.-->
    10 
    11     <!-- Use one of the two mentions below about a test suite,
    12          delete the line that is not applicable. Of course, if the
    13          test suite uses syntax other than "make check", revise the
    14          line to reflect the actual syntax to run the test suite -->
    15 
    16     <!-- <para>This package does not come with a test suite.</para> -->
    17     <!-- <para>To test the results, issue: <command>make check</command>.</para> -->
    18 
    19   <!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.4/krb5-&mitkrb-version;-signed.tar">
     7  <!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.6/krb5-&mitkrb-version;-signed.tar">
    208  <!ENTITY mitkrb-download-ftp " ">
    21   <!ENTITY mitkrb-md5sum "617e0071fa5b74ab4116f064678af551">
    22   <!ENTITY mitkrb-size "6.4 MB">
    23   <!ENTITY mitkrb-buildsize "TBD MB">
    24   <!ENTITY mitkrb-time "TBD SBU">
     9  <!ENTITY mitkrb-md5sum "a365e39ff7d39639556c2797a0e1c3f4">
     10  <!ENTITY mitkrb-size "12.0 MB">
     11  <!ENTITY mitkrb-buildsize "124 MB">
     12  <!ENTITY mitkrb-time "1.4 SBU">
    2513]>
    2614
    27 <sect1 id="mitkrb" xreflabel="MIT krb5-&mitkrb-version;">
     15<sect1 id="mitkrb" xreflabel="MIT Kerberos V5-&mitkrb-version;">
    2816  <?dbhtml filename="mitkrb.html"?>
    2917
    … …  
    3321  </sect1info>
    3422
    35   <title>MIT Krb5-&mitkrb-version;</title>
     23  <title>MIT Kerberos V5-&mitkrb-version;</title>
    3624
    3725  <indexterm zone="mitkrb">
    38     <primary sortas="a-Kerberos-MIT">Kerberos5(MIT)</primary>
     26    <primary sortas="a-MIT-Kerberos">MIT Kerberos V5</primary>
    3927  </indexterm>
    4028
    4129    <sect2 role="package">
    42       <title>Introduction to MIT Krb5</title>
    43 
    44     <para><application>MIT krb5</application> is a free implementation of
    45     Kerberos 5. Kerberos is a network authentication protocol. It
     30      <title>Introduction to MIT Kerberos V5</title>
     31
     32    <para><application>MIT Kerberos V5</application> is a free implementation
     33    of Kerberos 5. Kerberos is a network authentication protocol. It
    4634    centralizes the authentication database and uses kerberized
    4735    applications to work with servers or services that support Kerberos
    … …  
    7159    </itemizedlist>
    7260
    73     <bridgehead renderas="sect3">MIT Krb5 Dependencies</bridgehead>
     61    <bridgehead renderas="sect3">MIT Kerberos V5 Dependencies</bridgehead>
    7462
    7563    <bridgehead renderas="sect4">Optional</bridgehead>
    76     <para role="optional"><xref linkend="xinetd"/> (services servers only),
    77     <xref linkend="linux-pam"/> (for <command>xdm</command> based logins) and
    78     <xref linkend="openldap"/> (alternative for <command>krb5kdc</command>
    79     password database)</para>
     64    <para role="optional"><xref linkend="linux-pam"/>
     65    (for <command>xdm</command> based logins),
     66    <xref linkend="openldap"/>, and
     67    <xref linkend="dejagnu"/> (required to run the test suite)</para>
    8068
    8169    <note>
    … …  
    9280
    9381  <sect2 role="installation">
    94     <title>Installation of MIT Krb5</title>
    95 
    96 
    97     <!-- <note><para>The instructions for MIT Krb5 have not yet been validated by
    98     the BLFS Editors.  Until this section is updated, the Editors reccomend
    99     using <xref linkend='heimdal'/> to implement the functionality of this
    100     package.</para></note> -->
    101 
    102 
    103     <para><application>MIT krb5</application> is distributed in a
     82    <title>Installation of MIT Kerberos V5</title>
     83
     84    <para><application>MIT Kerberos V5</application> is distributed in a
    10485    TAR file containing a compressed TAR package and a detached PGP
    105     <filename class="extension">ASC</filename> file.</para>
    106 
    107     <para>If you have installed <xref linkend="gnupg"/>, you can
     86    <filename class="extension">ASC</filename> file. You'll need to unpack
     87    the distribution tar file, then unpack the compressed tar file before
     88    starting the build.</para>
     89
     90    <para>After unpacking the distribution tarball and if you have
     91    <xref linkend="gnupg"/> installed, you can
    10892    authenticate the package with the following command:</para>
    10993
    11094<screen><userinput>gpg - -verify krb5-&mitkrb-version;.tar.gz.asc</userinput></screen>
    11195
    112     <para>Build <application>MIT krb5</application> by running the
     96    <para>Build <application>MIT Kerberos V5</application> by running the
    11397    following commands:</para>
    11498
    11599<screen><userinput>cd src &amp;&amp;
    116 ./configure --prefix=/usr --sysconfdir=/etc \
    117     --localstatedir=/var/lib --enable-dns \
    118     --enable-static --mandir=/usr/share/man &amp;&amp;
     100./configure CPPFLAGS="-I/usr/include/et -I/usr/include/ss" \
     101            --prefix=/usr \
     102            --sysconfdir=/etc/krb5 \
     103            --localstatedir=/var/lib \
     104            --with-system-et \
     105            --with-system-ss \
     106            --enable-dns-for-realm \
     107            --mandir=/usr/share/man &amp;&amp;
    119108make</userinput></screen>
    120109
     110    <para>The regression test suite is designed to be run after the
     111    installation has been completed.</para>
     112
    121113    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
    122114
    123115<screen role="root"><userinput>make install &amp;&amp;
     116
    124117mv -v /usr/bin/ksu /bin &amp;&amp;
     118chmod -v 755 /bin/ksu &amp;&amp;
    125119mv -v /usr/lib/libkrb5.so.3* /lib &amp;&amp;
    126 mv -v /usr/lib/libkrb4.so.2* /lib &amp;&amp;
    127 mv -v /usr/lib/libdes425.so.3* /lib &amp;&amp;
    128120mv -v /usr/lib/libk5crypto.so.3* /lib &amp;&amp;
    129 mv -v /usr/lib/libcom_err.so.3* /lib &amp;&amp;
    130 ln -v -sf ../../lib/libkrb5.so.3 /usr/lib/libkrb5.so &amp;&amp;
    131 ln -v -sf ../../lib/libkrb4.so.2 /usr/lib/libkrb4.so &amp;&amp;
    132 ln -v -sf ../../lib/libdes425.so.3 /usr/lib/libdes425.so &amp;&amp;
    133 ln -v -sf ../../lib/libk5crypto.so.3 /usr/lib/libk5crypto.so &amp;&amp;
    134 ln -v -sf ../../lib/libcom_err.so.3 /usr/lib/libcom_err.so &amp;&amp;
    135 ldconfig</userinput></screen>
     121mv -v /usr/lib/libkrb5support.so.0* /lib &amp;&amp;
     122
     123ln -v -sf ../../lib/libkrb5.so.3.3 /usr/lib/libkrb5.so &amp;&amp;
     124ln -v -sf ../../lib/libk5crypto.so.3.1 /usr/lib/libk5crypto.so &amp;&amp;
     125ln -v -sf ../../lib/libkrb5support.so.0.1 /usr/lib/libkrb5support.so&amp;&amp;
     126
     127install -m644 -v ../doc/*.info* /usr/share/info &amp;&amp;
     128for INFOFILE in 425 5-admin 5-install 5-user; do
     129    install-info --info-dir=/usr/share/info \
     130                 /usr/share/info/krb$INFOFILE.info
     131    rm ../doc/krb$INFOFILE.info*
     132done &amp;&amp;
     133
     134install -m755 -v -d /usr/share/doc/krb5-&mitkrb-version; &amp;&amp;
     135cp -Rv ../doc/* /usr/share/doc/krb5-&mitkrb-version;</userinput></screen>
    136136
    137137    <warning>
    138138      <para><command>login.krb5</command> does not support
    139       <application>shadow</application> passwords. As a result, when the
     139      <application>Shadow</application> passwords. As a result, when the
    140140      Kerberos server is unavailable, the default fall through to
    141141      <filename>/etc/password</filename> will not work because
    … …  
    146146    </warning>
    147147
    148     <para>If <application>Linux-Pam</application> is not installed and
    149     you understand the above warning, the following can be entered as the
    150     <systemitem class="username">root</systemitem> user:</para>
     148    <para>After considering (and understanding) the above warning, the
     149    following commands can be entered as the
     150    <systemitem class="username">root</systemitem> user to replace the
     151    existing <command>login</command> program with the Kerberized
     152    version (after preserving the original) and move the support libraries
     153    to a location available when the
     154    <filename class='directory'>/usr</filename> filesystem is
     155    not mounted:</para>
    151156
    152157<screen role="root"><userinput>mv -v /bin/login /bin/login.shadow &amp;&amp;
    153 cp -v /usr/sbin/login.krb5 /bin/login</userinput></screen>
    154 
     158install -m755 -v /usr/sbin/login.krb5 /bin/login &amp;&amp;
     159
     160mv -v /usr/lib/libdes425.so.3* /lib &amp;&amp;
     161mv -v /usr/lib/libkrb4.so.2* /lib &amp;&amp;
     162
     163ln -v -sf ../../lib/libdes425.so.3.0 /usr/lib/libdes425.so &amp;&amp;
     164ln -v -sf ../../lib/libkrb4.so.2.0 /usr/lib/libkrb4.so &amp;&amp;
     165
     166ldconfig</userinput></screen>
     167
     168    <!--
    155169    <para>If <application>CrackLib</application> is installed, or if any
    156170    word list has been put in
    … …  
    160174
    161175<screen role="root"><userinput>ln -s /usr/share/dict/words /var/lib/krb5kdc/kadmin.dict</userinput></screen>
     176    -->
     177
     178    <para>To test the installation, you must have
     179    <xref linkend="dejagnu"/> installed and issue: <command>make
     180    check</command>. The RPC layer tests will require a portmap daemon
     181    (see <xref linkend="portmap"/>) running and configured to listen on the
     182    regular network interface (not localhost). See the <quote>Testing the
     183    Build</quote> section of the <filename>krb5-install.html</filename> file
     184    in the <filename class='directory'>../doc</filename> directory for complete
     185    information on running the regression tests.</para>
    162186
    163187  </sect2>
    … …  
    166190    <title>Command Explanations</title>
    167191
    168     <para><parameter>--enable-dns</parameter>: This switch allows
     192    <para><parameter>--enable-dns-for-realm</parameter>: This parameter allows
    169193    realms to be resolved using the DNS server.</para>
    170194
    171     <para><parameter>--enable-static</parameter>: This switch builds static
    172     libraries in addition to the shared libraries.</para>
    173 
    174     <para><command>mv -v /bin/login /bin/login.shadow &amp;&amp;
    175     cp -v /usr/sbin/login.krb5 /bin/login &amp;&amp;
    176     mv -v /usr/bin/ksu /bin</command>: Preserves
    177     <application>Shadow</application>'s <command>login</command>
    178     command, moves <command>ksu</command> and <command>login</command> to
    179     the <filename class="directory">/bin</filename> directory.</para>
     195    <para><parameter>--with-system-et</parameter>: This parameter causes the
     196    build to use the system-installed versions of the error-table support
     197    software.</para>
     198
     199    <para><parameter>--with-system-ss</parameter>: This parameter causes the
     200    build to use the system-installed versions of the subsystem command-line
     201    interface software.</para>
     202
     203    <para><parameter>--localstatedir=/var/lib</parameter>: This parameter is
     204    used so that the Kerberos variable run-time data is located in
     205    <filename class='directory'>/var/lib</filename> instead of
     206    <filename class='directory'>/usr/var</filename>.</para>
     207
     208    <!-- <para><parameter>- -enable-static</parameter>: This switch builds static
     209    libraries in addition to the shared libraries.</para> -->
     210
     211    <para><command>mv -v /usr/bin/ksu /bin</command>: Moves the
     212    <command>ksu</command> program to the
     213    <filename class="directory">/bin</filename> directory so that it is
     214    available when the <filename class="directory">/usr</filename>
     215    filesystem is not mounted.</para>
    180216
    181217    <para><command>mv -v ... /lib &amp;&amp; ln -v -sf ...</command>:
    182     The <command>login</command> and <command>ksu</command> programs
    183     are linked against these libraries, therefore these libraries are moved
    184     to <filename class="directory">/lib</filename> to allow logins without
    185     mounting <filename class="directory">/usr</filename>.</para>
     218    These libraries are moved to <filename class="directory">/lib</filename> so
     219    they are available when the <filename class="directory">/usr</filename>
     220    filesystem is not mounted.</para>
    186221
    187222  </sect2>
    188223
    189224  <sect2 role="configuration">
    190     <title>Configuring MIT Krb5</title>
     225    <title>Configuring MIT Kerberos V5</title>
    191226
    192227    <sect3 id="krb5-config">
    193228      <title>Config Files</title>
    194229
    195       <para><filename>/etc/krb5.conf</filename> and
     230      <para><filename>/etc/krb5/krb5.conf</filename> and
    196231      <filename>/var/lib/krb5kdc/kdc.conf</filename></para>
    197232
    198233      <indexterm zone="mitkrb krb5-config">
    199         <primary sortas="e-etc-krb5.conf">/etc/krb5.conf</primary>
     234        <primary sortas="e-etc-krb5-krb5.conf">/etc/krb5/krb5.conf</primary>
    200235      </indexterm>
    201236
    … …  
    212247        <title>Kerberos Configuration</title>
    213248
     249        <tip>
     250          <para>You should consider installing some sort of password checking
     251          dictionary so that you can configure the installation to only
     252          accept strong passwords. A suitable dictionary to use is shown in
     253          the <xref linkend="cracklib"/> instructions. Note that only one
     254          file can be used, but you can concatenate many files into one. The
     255          configuration file shown below assumes you have installed a
     256          dictionary to <filename>/usr/share/dict/words</filename>.</para>
     257        </tip>
     258
    214259        <para>Create the Kerberos configuration file with the following
    215         command:</para>
    216 
    217 <screen role="root"><userinput>cat &gt; /etc/krb5.conf &lt;&lt; "EOF"
    218 <literal># Begin /etc/krb5.conf
     260        commands issued by the <systemitem class="username">root</systemitem>
     261        user:</para>
     262
     263<screen role="root"><userinput>install -v -m755 -d /etc/krb5 &amp;&amp;
     264cat &gt; /etc/krb5/krb5.conf &lt;&lt; "EOF"
     265<literal># Begin /etc/krb5/krb5.conf
    219266
    220267[libdefaults]
    … …  
    226273        kdc = <replaceable>&lt;belgarath.lfs.org&gt;</replaceable>
    227274        admin_server = <replaceable>&lt;belgarath.lfs.org&gt;</replaceable>
     275        dict_file = /usr/share/dict/words
    228276    }
    229277
    … …  
    236284    default = SYSLOG[[:SYS]]
    237285
    238 # End /etc/krb5.conf</literal>
     286# End /etc/krb5/krb5.conf</literal>
    239287EOF</userinput></screen>
    240288
    … …  
    282330
    283331        <para>This should have created a file in
    284         <filename class="directory">/etc</filename> named
     332        <filename class="directory">/etc/krb5</filename> named
    285333        <filename>krb5.keytab</filename> (Kerberos 5). This file should
    286334        have 600 (<systemitem class="username">root</systemitem> rw only)
    … …  
    318366
    319367<screen><userinput>ktutil
    320 <prompt>ktutil:</prompt> rkt /etc/krb5.keytab
     368<prompt>ktutil:</prompt> rkt /etc/krb5/krb5.keytab
    321369<prompt>ktutil:</prompt> l</userinput></screen>
    322370
    … …  
    372420
    373421        <para>For additional information consult <ulink
    374         url="http://web.mit.edu/kerberos/www/krb5-1.4/#documentation">
     422        url="http://web.mit.edu/kerberos/www/krb5-1.6/#documentation">
    375423        Documentation for krb-&mitkrb-version;</ulink> on which the above
    376424        instructions are based.</para>
    … …  
    392440
    393441      <seglistitem>
    394         <seg>compile-et, ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
    395         kadmin.local, kadmind, kadmind4, kdb5_util, kdestroy, kinit, klist,
    396         klogind, kpasswd, kprop, kpropd, krb5-send-pr, krb5-config, krb524d,
     442        <seg>ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
     443        kadmin.local, kadmind, kdb5_ldap_util, kdb5_util, kdestroy, kinit, klist,
     444        klogind, kpasswd, kprop, kpropd, krb5-config, krb5-send-pr, krb524d,
    397445        krb524init, krb5kdc, kshd, ksu, ktutil, kvno, login.krb5, rcp, rlogin,
    398446        rsh, sclient, sim_client, sim_server, sserver, telnet, telnetd,
    399         uuclient, uuserver, v5passwd, and v5passwdd</seg>
    400         <seg>libcom_err.{so,a}, libdes425.{so,a}, libgssapi.{so,a},
    401         libgssrpc.{so,a}, libkadm5clnt.{so,a}, libkadm5srv.{so,a},
    402         libkdb5.{so,a}, libkrb5.{so,a}, and libkrb4.{so,a}</seg>
    403         <seg>/usr/include/kerberosIV and /var/lib/krb5kdc</seg>
     447        uuclient, uuserver and v4rcp</seg>
     448        <seg>libdes425.so, libgssapi_krb5.so,
     449        libgssrpc.so, libk5crypto.so, libkadm5clnt.so, libkadm5srv.so,
     450        libkdb5.so, libkdb_ldap.so, libkrb4.so, libkrb5.so and
     451        libkrb5support.so</seg>
     452        <seg>/etc/krb5, /usr/include/{gssapi,gssrpc,kerberosIV,krb5},
     453        /usr/lib/krb5, /usr/share/{doc/krb5-&mitkrb-version;,examples,gnats}
     454        and /var/lib/krb5kdc</seg>
    404455      </seglistitem>
    405456    </segmentedlist>
    … …  
    410461      <?dbhtml list-presentation="table"?>
    411462
    412       <varlistentry id="compile_et">
    413         <term><command>compile_et</command></term>
    414         <listitem>
    415           <para>converts the table listing error-code names into a
    416           C source file.</para>
    417           <indexterm zone="mitkrb compile_et">
    418             <primary sortas="b-compile_et">compile_et</primary>
    419           </indexterm>
    420         </listitem>
    421       </varlistentry>
    422 
    423463      <varlistentry id="ftp-mitkrb">
    424464        <term><command>ftp</command></term>
    425465        <listitem>
    426466          <para>is a kerberized FTP client.</para>
    427           <indexterm zone="mitkrb ftp">
     467          <indexterm zone="mitkrb ftp-mitkrb">
    428468            <primary sortas="b-ftp">ftp</primary>
    429469          </indexterm>
    … …  
    435475        <listitem>
    436476          <para>is a kerberized FTP daemon.</para>
    437           <indexterm zone="mitkrb ftpd">
     477          <indexterm zone="mitkrb ftpd-mitkrb">
    438478            <primary sortas="b-ftpd">ftpd</primary>
    439479          </indexterm>
    … …  
    559599      </varlistentry>
    560600
    561       <varlistentry id="krb5-config-1">
     601      <varlistentry id="krb5-config-prog2">
    562602        <term><command>krb5-config</command></term>
    563603        <listitem>
    564604          <para>gives information on how to link programs against
    565605          libraries.</para>
    566           <indexterm zone="mitkrb krb5-config-prog">
    567             <primary sortas="b-krb5-config-1">krb5-config</primary>
     606          <indexterm zone="mitkrb krb5-config-prog2">
     607            <primary sortas="b-krb5-config">krb5-config</primary>
    568608          </indexterm>
    569609        </listitem>
    … …  
    639679        <listitem>
    640680          <para>is a kerberized rcp client program.</para>
    641           <indexterm zone="mitkrb rcp">
     681          <indexterm zone="mitkrb rcp-mitkrb">
    642682            <primary sortas="b-rcp">rcp</primary>
    643683          </indexterm>
    … …  
    659699        <listitem>
    660700          <para>is a kerberized rsh client program.</para>
    661           <indexterm zone="mitkrb rsh">
     701          <indexterm zone="mitkrb rsh-mitkrb">
    662702            <primary sortas="b-rsh">rsh</primary>
    663703          </indexterm>
    … …  
    669709        <listitem>
    670710          <para>is a kerberized telnet client program.</para>
    671           <indexterm zone="mitkrb telnet">
     711          <indexterm zone="mitkrb telnet-mitkrb">
    672712            <primary sortas="b-telnet">telnet</primary>
    673713          </indexterm>
    … …  
    679719        <listitem>
    680720          <para>is a kerberized telnet server.</para>
    681           <indexterm zone="mitkrb telnetd">
     721          <indexterm zone="mitkrb telnetd-mitkrb">
    682722            <primary sortas="b-telnetd">telnetd</primary>
    683723          </indexterm>
    … …  
    685725      </varlistentry>
    686726
    687       <varlistentry id="libcom_err">
    688         <term><filename class='libraryfile'>libcom_err.{so,a}</filename></term>
    689         <listitem>
    690           <para>implements the Kerberos library error code.</para>
    691           <indexterm zone="mitkrb libcom_err">
    692             <primary sortas="c-libcom_err">libcom_err.{so,a}</primary>
    693           </indexterm>
    694         </listitem>
    695       </varlistentry>
    696 
    697       <varlistentry id="libgssapi-mitkrb">
    698         <term><filename class='libraryfile'>libgssapi.{so,a}</filename></term>
     727      <varlistentry id="libgssapi_krb5-mitkrb">
     728        <term><filename class='libraryfile'>libgssapi_krb5.so</filename></term>
    699729        <listitem>
    700730          <para>contain the Generic Security Service Application
    … …  
    703733          underlying mechanisms and technologies and hence allowing source-level
    704734          portability of applications to different environments.</para>
    705           <indexterm zone="mitkrb libgssapi">
    706             <primary sortas="c-libgssapi">libgssapi.{so,a}</primary>
     735          <indexterm zone="mitkrb libgssapi_krb5-mitkrb">
     736            <primary sortas="c-libgssapi_krb5">libgssapi_krb5.so</primary>
    707737          </indexterm>
    708738        </listitem>
    … …  
    710740
    711741      <varlistentry id="libkadm5clnt-mitkrb">
    712         <term><filename class='libraryfile'>libkadm5clnt.{so,a}</filename></term>
     742        <term><filename class='libraryfile'>libkadm5clnt.so</filename></term>
    713743        <listitem>
    714744          <para>contains the administrative authentication and password
    715745          checking functions required by Kerberos 5 client-side programs.</para>
    716           <indexterm zone="mitkrb libkadm5clnt">
    717             <primary sortas="c-libkadm5clnt">libkadm5clnt.{so,a}</primary>
     746          <indexterm zone="mitkrb libkadm5clnt-mitkrb">
     747            <primary sortas="c-libkadm5clnt">libkadm5clnt.so</primary>
    718748          </indexterm>
    719749        </listitem>
    … …  
    721751
    722752      <varlistentry id="libkadm5srv-mitkrb">
    723         <term><filename class='libraryfile'>libkadm5srv.{so,a}</filename></term>
     753        <term><filename class='libraryfile'>libkadm5srv.so</filename></term>
    724754        <listitem>
    725755          <para>contain the administrative authentication and password
    726756          checking functions required by Kerberos 5 servers.</para>
    727           <indexterm zone="mitkrb libkadm5srv">
    728             <primary sortas="c-libkadm5srv">libkadm5srv.{so,a}</primary>
     757          <indexterm zone="mitkrb libkadm5srv-mitkrb">
     758            <primary sortas="c-libkadm5srv">libkadm5srv.so</primary>
    729759          </indexterm>
    730760        </listitem>
    … …  
    732762
    733763      <varlistentry id="libkdb5">
    734         <term><filename class='libraryfile'>libkdb5.{so,a}</filename></term>
     764        <term><filename class='libraryfile'>libkdb5.so</filename></term>
    735765        <listitem>
    736766          <para>is a Kerberos 5 authentication/authorization database
    737767          access library.</para>
    738768          <indexterm zone="mitkrb libkdb5">
    739             <primary sortas="c-libkdb5">libkdb5.{so,a}</primary>
     769            <primary sortas="c-libkdb5">libkdb5.so</primary>
    740770          </indexterm>
    741771        </listitem>
    … …  
    743773
    744774      <varlistentry id="libkrb5-mitkrb">
    745         <term><filename class='libraryfile'>libkrb5.{so,a}</filename></term>
     775        <term><filename class='libraryfile'>libkrb5.so</filename></term>
    746776        <listitem>
    747777          <para>is an all-purpose Kerberos 5 library.</para>
    748           <indexterm zone="mitkrb libkrb5">
    749             <primary sortas="c-libkrb5">libkrb5.{so,a}</primary>
     778          <indexterm zone="mitkrb libkrb5-mitkrb">
     779            <primary sortas="c-libkrb5">libkrb5.so</primary>
    750780          </indexterm>
    751781        </listitem>
Note: See TracChangeset for help on using the changeset viewer.