krb5-fermi-config-1.9-3.LTS> A AlpA?A]c5jm,1IU:wTX+COեd@Xbow1b76e63474e17ad0b135a455a8cd1c1fceef8290SLϥQU?S(n39Y?A]c5j_{_G'mKJȬF:,ij"c_IS >D$?$ d  Ydhx| 6| 6 t   o     B h  ()*S+|,-89:B>+?3D;FSGpHIhXY\]^ b!<d!`e!ef!jk!ll!st!u"v"w"x#dy#z#Ckrb5-fermi-config1.93.LTSConfiguration scripts to get Fermize your Kerberos MachineKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realmA]c)noswad.fnal.govmFermi National Accelerator LaboratoryMIT, freely distributable.Troy Dawson Fermihttp://web.mit.edu/kerberos/www/linuxnoarchif [ -f /etc/krb5.conf ] ; then if [ "$(grep 'ups installAsRoot krb5conf' /etc/krb5.conf)" = "" ] ; then echo "current krb5.conf does not match template, moving it to /etc/krb5.conf.save.krb5-fermi-config.1.9.3.LTS" mv /etc/krb5.conf /etc/krb5.conf.save.krb5-fermi-config.1.9.3.LTS else echo "current krb5.conf matches template. We will only change the top section." fi fi /usr/krb5/config/config-krb5.conf 1.9 if [ -f /etc/krb.conf ] ; then echo "Fixing /etc/krb.conf" if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.9.3.LTS ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.9.3.LTS fi cp -f /etc/krb.conf.fermi /etc/krb.conf fi if [ -f /etc/inetd.conf ] ; then /usr/krb5/config/config-inetd.conf 1.9 fi if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.9 fi /usr/krb5/config/config-services 1.9 if [ -f /etc/sshd_conf ] ; then /usr/krb5/config/config-sshd_config 1.9 fi echo "Your computer has been configured to run kerberos" echo "If you need a host priciple you should run '/usr/krb5/config/makehostkeys'"if [ "$1" = "0" ] ; then echo "We are in the pre-un and running" fiWUE c AA䁤䁤AA큤A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(A]c(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-fermi-config-1.9-3.LTS.src.rpmkrb5-fermi-config@ @@@@JJ/bin/sh/bin/sh/bin/sh/bin/shfileutilskrb5-workstation-fermirpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)3.0.4-14.0-14.2.3if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.9 >> /tmp/fermi.krb5.config.xinetd fiif [ -f /etc/krb.conf ] ; then if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.9.3.LTS ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.9.3.LTS fi cp -f /etc/krb.conf.fermi /etc/krb.conf fiif [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.9 >> /tmp/fermi.krb5.config.xinetd fikrb5-workstationkrbafskrb5-workstationA]AY@sD@sD@m@(@{?x?_?_?s>>y=TW< 1.9-3.LTSTroy Dawson 1.9-1.LTSTroy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson - fixed script that says it's 1.8a - made the rpm a noarch- updated to 1.9- added .sdsc.edu to the FNAL.GOV realm- added .sdsc.edu to the FNAL.GOV realm- Changed krb5.conf.template to put PAM section at top.- Fixed it so that it no longer moves the current krb5.conf out of the way if it does not have to.- Updated to krb5conf 1.8a- Put back in the krb.conf, but with proper settings, and triggers- Cleaned out krb.conf so it quits messing things up.- Converted to krb5conf 1.7. I had missed a few things the first time- Added triggers for the xinetd configs- Took out the check that took krb.conf completely out.- Took /etc/krb.conf out- Changed the requires, put in a check before it does ssh config- Fixed a bug in the krb5.conf template (removed two 4's)- Made changes to the config xinetd script- Configured to use the krb5conf v1_6 stuff- Changed spec file so that it moves the /etc/krb5.conf file- Changed the krb5.conf.template file so that the Pam part was first, also lengthened ticket time - Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file- Made changes for pam usage in krb.conf and krb5.conf - Also removed the linking of /usr/krb5 and /usr/kerberos- Upgraded from krb5conf 1.5. Also put in changes for xinetd.- Made improvements to the makehostkeys script. I also have it check for the varias files (sshd_config, services) before modifying them.- The config-inetd.conf script has been changed to look for services that have a kerberos equal. If these services were originally turned off, then the kerberized version is turned off. I also took out the keytab-convert program, as this is dependant on one particular flavor of fermi kerberos.- I added the keytab-convert program into the config rpm, with it's corresponding manpage. It will also be in the normal kerberos rpm but in the bin area.- I changed things to the version 1.4. I also added the config-sshd_config script, as well as the config-hostkeys script.- I finished with the config-services and config-inetd.conf scripts. I also changed how the /usr/krb5 and /usr/kerberos were linked.- I put the raw scripts into the package from Fermi. These will need to be rewritten so that they don't depend on Fermi packages./bin/sh/bin/sh/bin/sh/bin/sh/bin/shnoswad.fnal.gov 1096639273BC%'&D@@@1.9-3.LTSkrb.conf.fermikrb5configconfig-hostkeysconfig-inetd.confconfig-krb5.confconfig-servicesconfig-sshd_configconfig-xinetdeklogin.xinetdeklogin.xinetd.onftp.xinetdftp.xinetd.oninetd.conf.templateinetd.conf.wrapped.templateklogin.xinetdklogin.xinetd.onkrb5.conf.templatekshell.xinetdkshell.xinetd.onmakehostkeysservices.templatesshd_config.templatesshd_config.weak.templatetelnet.xinetdtelnet.xinetd.onxinetd.templatemanman5keytab-convert.5krb5conf.5/etc//usr//usr/krb5//usr/krb5/config//usr/krb5/man//usr/krb5/man/man5/-O2 -g -pipe -march=i386 -mcpu=i686cpiogzip9noarchnoarch-redhat-linux-gnuASCII C++ program textASCII English textASCII textBourne shell script text executabledirectoryRRRRRRRƊWVnF H,} ?=m[Ʋj)&R〓&.ӴTֶJ2V 6i{N hwgwggggfgf7lp+/|m{kjrܶsnF78MpnOGy}#b~-֕ϷOys7g/i 4;W ZO֒NAR/ F  sqY6p33"4g4cJ5}1I i'q%0fw/8 Jt96?nݐg][_vv"Z]Dunyk+Am{q9kDZjFm£c,߄Gǝћnlu€U fue0Q#VXKo̦{w}3*fQs\pp 8aǦM4trʨ 0sXU~g♫6e~fqDVMI wšR߱z|s!La%<<7.~eASmj*>e pO 6Ԟ?ǿG^ȡ0l~G!aÉ!x4 5R\=ULo]`Ch9cGâ$,G" }əOgXD[`Mⱀ+?r2NtYP(;*x!G>e#&D*HbMY i`(VUGpfգkx·_kZWNA,Q;*0U,}+(dw1)" qƣɹ:cy0%P<˙b jaC9:Jʍl<C) jcA Hty&#Gn18|pAgdr@6-iI-"s5mo)sm*s|aLwr O~ 1uB)!:Es^c @cmYKZ@9X捠;úv'2r:?OPw{.i+ьh]TQnQ],'ZvN7shO Q6[zb5= J0arظX?xl;{=ͮ"X {<'0gG$,ɸu}z]",[FBE99|wזpf@G%XL$1Sp+?hXø[hvu^^;P@v߯@#q2@րR>쇄]Q4nu*"ZzZ:uiQn .W4p Q">GJ&᝸ @'pj6UQGo#;č CJCl?V(~3ٷV'#ߜSzzP^Pe`B}`v7O6 ?^<"wSJa1"Gq7Ac-! p XmFᄁ4L#O)Mv-ox_TE}RQ-y&gE7J:!*KrJQ`Ql kk:LK*ĩ1|Oh]4 jeIoPA/>?uU4s~{$Ol8*JyxV9=VC٪z&u/Z * q rյol5P@3X's s"WgYڕe|ޜghr{dqY&؉AjfZY5fjdUF:k߻֛vS[VjtqM {Wǭ֒PMp\ ɣP /?"Ц51@4$!heVhD 613hch"VY50$KNzUDid G(rB >t9(8rJXGBDp;]z6onkdt'kt`QPe(D>`hd(ؑ@΄#G 7IbMuܼb%c~j¨sҺ&Km"9f?LSm]>vߦo.X6b5ec+F]N@%ixơ PD5B*dH$@B\lV8HŪn$nnB5)V)2h%hy!ZA拀 |Ur궛u|ݤyk7\3;T?P+t" CbwBLJɷhdVb=q|Y-tIPDAE[>y{~blPKs'V桗`̌Uݡ%'qx3V3PetvDa^z¨+aTU =tgh㭋j)Ûŗڬ?|N5X}$M6)wgG$T;#7A^J2s=\g}N-Q'ÉN1 nEk傃A}&`RElXM8j!;8ZQƶJ9s!I3Nq3$mY⏎oV ~htv틦 L ]{.>22.{kW)c!Phu6P rd\ۧ E ]؉(]dD:a[^pE#al1C g1zkD57nj '?`~ޙ4cʣGAG.,z@"+Nfz.dQ4=S\ٍ0 #WW3+tP!w؇ iڴrZԣ-:47Iyp - Z>89M✍+Tʾ#f*H֍F\Wk.^jH&aۅ p飑D0hBQv=r$C'.$H#b&rUH`c͇rC>\%4 YYb: =Tu4ϟ[Z@JQέU3br1q8 5g3W;oe\KKj##IIx Z9I /UM҆q683T^BvM-n$ 6P 0dtҘVfkGaXߐ?nܸ& Wh?8AEVz>DQ|݆;t |ɏn% ~^_[q~YyFpyB 1 A7ߴ_ZANV)ukUl m: u縺I#L}`fNAa^yrńw>ݹES}JcHo~_Y 6?(#%6RY!o[0*f<'Hݼ}[ ! 5s()ǥmhOPdw"`|@c x#KndE2\/佥y,OA9 TN)Jbj*^ܟ|'ShށxA_SQQfח9Ƽy:ʣkűuKy^L˼p= !\ן=PV.,&b:aXIF̏\3 ȴef0ڶ"hJp& YR u Y-,-cz]1U8AYκ1S9s=*Q' fj&/[1G!3g>⠖YZ]0%,?O6}!U[Uamty(:4ʚ9!F5w8S_h5"Ax4:,OuIZ] q iv̩g+SrM9ˣ" Lz^EMmm+䡣=䌌fIm%!ߨQEGJIWyy$Rªmd9u9e5ìftl+J_٬~TVS 4BM%:Ox r")AJ'ք^ux[.qmWϳ*ȍ Pv_,[MXʡUMӕ P1\_Tre:eusLt@;|!, #cU kF tkRbfڊ)MᎨhBg6Wr-NҢ #Tٚ,昚Iy8"poTJgʽ5~D"t> どDq*/C3Yj_YtCV`e,O-[X[ٍ j" "]nxLjTnf2v[$.ih%M\S1i,}G*ZJD!X̃rcY9Dt"!$9Gw ӀrO#1l5꒥@2̈́o5/1X]2֊e^RɶKPoӌ\%dϘD\x%7&pU/Uut΋f6{PBSɑqKE2oZ!VIJDW9Pj-l( R7WQ0v}t) =^m͍yHv$AzA(CҒza/  㑗LFH a_"Q`$+}ƈ ,BJuJ `\{IsSQ`ᘧ]ˡm265J/< ?Js?;Lќ1C 8GfgH~N:%Z-1AVO@\se'";Y0bfK _11{͒]#P7D#U37駲fc (?hdޝ;h4 ]>wt #iIoB{BsҦq^6 T,JDRD =39"t_Ms4xsQ_n>++-Fw[Iwg]ś)(x;݊jTNT#<3ȡX1;W:-eE ':!t5K@3v@Hπ76LA"odpLd_ظO:zB1]S6\$t|Fey.DHpL$/˟.9#pzqrv 0AaW!X=RxG5J.GYz.@owW6z m,b7{OeJ&Et/֜nW74.bg.Hخ03~ǿqq"=gMgz\"?XAyeM.H=ۂy&^"Qׅ\y:ߡXM ONTd.eBdJ&GD9DJsHIE"PJI4GCBĮmC?sR"YO'y9!HX#u W) ' *vYsк"vW~_U}x<,L v^kxg9fY%Մ]*@WWW񿠍n MGLK,'"AMjaҹO@ LGht;ONo\⭛o.~\*$G1w]$Ev6]['ae!\ͱu|>~qf Ԟ9r7g[̽~K8unŻ;{WN{]ml8c&;O7o),\_65b5biLJp,<g 6L_" 4C?|bm*zʦy)Od5>%bet&3K7 KUX֙1)x!VjuփR*;)ZvS0BWã@oЙ7ǎF}7r_,9A5yfg AQ޴8$[`=6a+]d޿yS'HxŮ<qCQ6p XFUr4h츞s0Ja4 l3>/ο&3";sϝ. 9a:a `7JvsOULP眂>^M~U| "`:.EY:>w#gG$ sZ}iotid1q 3ǘND7?t_Y-B%0݌03u=Va ǀ|7ވFxBF˹%*NBSO2HE:s[dJ?CfAAm,E ɣ< 9饠!E'H87UR3'{Y !R>*t,RWR;G;i)[Ng?5?6J=[Xj47ؼxA=El0iH٦hGí{#tx;Z?X>^(OSޜ771s>I:u޴wfd2H(dk 4R"z7D\BGqh͔J-LIˈ3AHOUJ0W$sHntObd=Rg (bB9_S|.~E ~ǟ'7j9BCiEvpJ^{~Xh^!eELM _x 'cDƭ4D0xaa1`-d7(_qUKnxhE0/tUYb@$Ez?νe(u"ku2BI7_-$ib,4EDWL*Ƅ)ևrT`DfJ~\@A@S+PDR 9ȫY6a lvTa2YTVT_QTebh)+)y*tTELm_<1l(Y=GGA1\.S/&5\*{1b)Xk> 9^.yH=q7vpL(ͮob ]G],Vi\7*MeFJzV&g<a%L/`+T܍Е/t+@?9|8eOG{ Xc[.dA PaA*DgSӯ=}>GtaS3.ئcFޅڠ4VO kK.}K|5YC?5n-l&X 5Um67pU!pf{浛ttƂ,)gVf6UzgOaAHdm+&*>*=]RbMmo |' ʼۭ%։(PfZH:#^p ix=~; Zo+'>]06E!ɦ(/m3͊Ҝ/.(cll|}@>eM9y N][C O~<8<:Tu;h`?F쓝6FU,Pg퓽i-P'*u΃E<җ?*$i-?=+k]szW9Ƨ FxRuy,c=~>Op(uJԳx٬Fnꆻ\"j/(z3ʔ"ۨR%AZ:-I`ӽq #֜/ޮQGr%xu/q>+UTѓ 2|#ɌzJOɷf3~NRaO3!sz/ ;i@RcBS?@󱛏+7Mh{֬c|P]^4Zp QoV=SE Д#S"Itɰ9iq/N$R9vs1Rvc7q] 12|۬:stuMG`^{ubf:KhXɋXn~]lΓrcmeV9doZornl4ri9"/E2 Up^< MǘXBA;:p{vk{(I]62D, ; U)X:&r >0t"l_WIUh¶AH4vF]=T >*@ Me2y*F;p&M`q`N-`Okb rzV;E }UXȇGF8745X2s=`QVTMq!>묡6&O҂bF aGqdFc )L<@DS3LB[0 & kTg&1`!Sjx[#AtMݲ貒i4LBrC'`zy zw &#S;