krb5-fermi-config-2.5-4> A AlpA?FjIM^;=$4=Z,TA1FM^~2RF#>600969562f45ff386d1afdcee2b72307466b3c23` TƉ!6?FjC5Vr XaŇ,A9/+$\ AtP8K >D(?(d  U`dtx _!(! j! ! 0!  !  ! ! =!  !   n ()*{+,-8#9#:%#>!?!D!F!G!!H"x!I"!X# Y#(\#4!]#!^%b&d&)e&.f&3k&5l&<t&T!u&!v'\w'!x(0!y(z(Ckrb5-fermi-config2.54Configuration scripts to get Fermize your Kerberos MachineKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realmFyort.fnal.govĤScientific LinuxMIT, freely distributable.Troy Dawson Fermihttp://web.mit.edu/kerberos/www/linuxnoarchif [ -f /etc/krb5.conf ] ; then echo "We need a fresh krb5.conf, moving old krb5.conf to /etc/krb5.conf.save.krb5-fermi-config.2.5.4" mv /etc/krb5.conf /etc/krb5.conf.save.krb5-fermi-config.2.5.4 fi /usr/krb5/config/config-krb5.conf 2.5 if [ -f /etc/krb.conf ] ; then echo "Fixing /etc/krb.conf" if ! [ -s /etc/krb.conf.save.krb5-fermi-config.2.5.4 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.2.5.4 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fi if [ -f /etc/inetd.conf ] ; then /usr/krb5/config/config-inetd.conf 2.5 fi if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 2.5 fi /usr/krb5/config/config-services 2.5 if [ -f /etc/sshd_conf ] ; then /usr/krb5/config/config-sshd_config 2.5 fi echo "Your computer has been configured to run kerberos" echo "If you need a host priciple you should run '/usr/krb5/config/makehostkeys'"if [ "$1" = "0" ] ; then echo "We are in the pre-un and running" fiW sU* c0 s AA䁤䁤AA큤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-fermi-config-2.5-4.src.rpmconfig(krb5-fermi-config)krb5-fermi-config@ @@@@JJ/bin/sh/bin/sh/bin/sh/bin/shconfig(krb5-fermi-config)fileutilskrb5-workstation-fermirpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)2.5-43.0.4-14.0-14.3.3if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 2.5 >> /tmp/fermi.krb5.config.xinetd fi/usr/krb5/config/config-krb5.conf.aklog/usr/krb5/config/config-krb5.conf.aklogif [ -f /etc/krb.conf ] ; then if ! [ -s /etc/krb.conf.save.krb5-fermi-config.2.5.4 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.2.5.4 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fiif [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 2.5 >> /tmp/fermi.krb5.config.xinetd fikrb5-workstationopenafsopenafs-thiscellopenafsopenafs-thiscellkrbafskrb5-workstationFYFYFFE"DxBAA]AY@sD@sD@m@(@{?x?_?_?s>>y=TW< 2.5-4Troy Dawson 2.5-3Troy Dawson 1.25-1.LTS4Troy Dawson 1.24a-1.LTS4Troy Dawson 1.16-1.LTS4Troy Dawson 1.15-1.LTS4Troy Dawson 1.10-1.LTS4Troy Dawson 1.9-4.LTSTroy Dawson 1.9-3.LTSTroy Dawson 1.9-1.LTSTroy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson - Made it generic, to work with both SLF3 and SLF4- Updated the name to match the krb5.conf version - 2.5 - updated the config script to say 2.5 - Made it so that it moves the old krb5.conf out of the way- updated the krb5.conf.template file to version 1.25 - Changed makekeys so that it finds the right kadmin- updated the krb5.conf.template file to version 1.24a- updated the krb5.conf.template file to version 1.16- updated the krb5.conf.template file to version 1.15- updated the krb5.conf.template file to version 1.10- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog - added triggers to run config-krb5.conf.aklog with AFS triggers- fixed script that says it's 1.8a - made the rpm a noarch- updated to 1.9- added .sdsc.edu to the FNAL.GOV realm- added .sdsc.edu to the FNAL.GOV realm- Changed krb5.conf.template to put PAM section at top.- Fixed it so that it no longer moves the current krb5.conf out of the way if it does not have to.- Updated to krb5conf 1.8a- Put back in the krb.conf, but with proper settings, and triggers- Cleaned out krb.conf so it quits messing things up.- Converted to krb5conf 1.7. I had missed a few things the first time- Added triggers for the xinetd configs- Took out the check that took krb.conf completely out.- Took /etc/krb.conf out- Changed the requires, put in a check before it does ssh config- Fixed a bug in the krb5.conf template (removed two 4's)- Made changes to the config xinetd script- Configured to use the krb5conf v1_6 stuff- Changed spec file so that it moves the /etc/krb5.conf file- Changed the krb5.conf.template file so that the Pam part was first, also lengthened ticket time - Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file- Made changes for pam usage in krb.conf and krb5.conf - Also removed the linking of /usr/krb5 and /usr/kerberos- Upgraded from krb5conf 1.5. Also put in changes for xinetd.- Made improvements to the makehostkeys script. I also have it check for the varias files (sshd_config, services) before modifying them.- The config-inetd.conf script has been changed to look for services that have a kerberos equal. If these services were originally turned off, then the kerberized version is turned off. I also took out the keytab-convert program, as this is dependant on one particular flavor of fermi kerberos.- I added the keytab-convert program into the config rpm, with it's corresponding manpage. It will also be in the normal kerberos rpm but in the bin area.- I changed things to the version 1.4. I also added the config-sshd_config script, as well as the config-hostkeys script.- I finished with the config-services and config-inetd.conf scripts. I also changed how the /usr/krb5 and /usr/kerberos were linked.- I put the raw scripts into the package from Fermi. These will need to be rewritten so that they don't depend on Fermi packages./bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/shyort.fnal.gov 1186587336(    2.5-42.5-4krb.conf.fermikrb5.conf.aklogkrb5configconfig-hostkeysconfig-inetd.confconfig-krb5.confconfig-krb5.conf.aklogconfig-servicesconfig-sshd_configconfig-xinetdeklogin.xinetdeklogin.xinetd.onftp.xinetdftp.xinetd.oninetd.conf.templateinetd.conf.wrapped.templateklogin.xinetdklogin.xinetd.onkrb5.conf.templatekshell.xinetdkshell.xinetd.onmakehostkeysservices.templatesshd_config.templatesshd_config.weak.templatetelnet.xinetdtelnet.xinetd.onxinetd.templatemanman5keytab-convert.5krb5conf.5/etc//etc/sysconfig//usr//usr/krb5//usr/krb5/config//usr/krb5/man//usr/krb5/man/man5/-O2 -g -pipe -m64cpiogzip9noarchnoarch-redhat-linux-gnuASCII English textASCII textBourne shell script text executabledirectoryRRRRRRRRܵ4/m*w ?}k[۸hƿBK 0 3;g::$vvy;.,;NH(sۧ}fZ%iiiݴxzs}lvß'MosOsS?_Otf['wMfeq8]^W? (ht#h{_9ㅏn=kn涱^[:Jqj9r],nijNߝ@va/KEHuvEvH:MQ\w#G7iKml?<p;uy4ٔu,Ҝs˺wu ƃrߝ[޸[͍ט* 44)gɧHW4.47k0ZK/gA2~2\n?^FRBВcKh:L8=7Ah:0I3qę$86?^zLvkv]sp>hmoF^_FѹIv}d>eY4"Gf8Rxsڛ[goZo땕ɤ#8bEb!G:kDv+Dy F/$r8 CLgLB_٩ivwkziur7~{{n_NMX.BE@4bUiVE+_LxD@"U;/pc3 ;u}ϿZJF#τDeF.Df+u-uVU_{) yaGCˣH@53Z&R,|`? ?`(} Y^пsxXOsa 8^Vذ'?g?R#F_ cF Swj1:z-y؍L+N dEaRT»c(fi7xp^^I k L%EH^@(2I!: $1N!Ӫ~iV=*?~py0M hlqHiy4Fm8L]*breLS\F -g2d" +x.5]];]P%Fb1GGA5Z:X,@+:_,'D !D{a"aKL;tF #{=( >|5]y+ BAdx!4`ZL' $DƸd&%b/XF-B1$@+o0I=U팸29?KP3p{ŴhF4a6͠]"&ZudC)q4C]6 b=]|1 |jl [I0jظxx~!aBrx~>$# 9(J +@k2_Կj 0rHx0y<.VD^jIJbToALUŠ8xQ5hHIЬ?(jy(\ >l+u\I_e]Q"WS{jeW"x2^NZ][Y6A-j&WE@lYoAXFF&;aJa/3,QөɪtZ'bZ[.jpqMx;GLJ[od6/ dxZ!FGkdفF.B0,[D6e1 k\-$,aA9FZ-02bO(Ha2ўm: dj}~gJeYDp#_ Zٴh䉽F$D_0@hL~k bK/`h&7Q!#Nx"G 7$W+ ܐ'Cdr*")(J d$LtX?sK̻|m%ނɅ.?UMkǖ#FIT@i(ab! Y P?]x"4)#FDNB#rreD ! M#sH(&DҬSzNž2LK{gsBtp\46FP#sW@`B aZTOYUgbqj18]uc5*qV+m-w[Mhݽ֋vY#x[&w j} aG}Y1qE(V">SC,RkUc8^ef}~sC<b,*>y9 .T=M% 5ѭg=&z I!`\~ZO/:ەgB[ЃzytOcfI z¡QgEx +60^څ"29g$@@UA=7 Z O2ubux) mՠ + :`^)D^'a;SL"!^|K݁pcd% tW"N&yYlHpxܡ _&, O#XMZɷK$Gg5>}Zy$Eaz=m ϩO jWgbZ(ɝ$[~fA73VQgzגt:=zeՆy rxyh]z&( [AhS'/ߵ0 $9VcH' l60%!3$Iv*^4ֿC%0%b 󁢑{#VNbʕKLCfJElZȾMqOYwh֋މ;ա3LO)bt}(ǿ$beLx ΄1G4`8?J*/AjcJ8!rL](K `yNuo^o0v1]diq2E5^w@ 3͆]' cokbQT&['Z䝏j#axi~>qrgr6y0mt\m܃PF];k`Q}ɁV)㒪{MsJؓMk*WqA5U:(w(ye=/}|wx]p```0ݮ/# DAXwk]nCpK<1 MR,|?&^2:CBy 聍ׁSԂa`NS1X-iQݭE&Q@iYԸ((Ck>T YmEW4X+XZy܁aѨ#&Ǝ){Ψ_qYL.-e0t5ԧtTo:? avqgh6l[HAYa8VQпu5Uvy+kU"X[ u&aKkP~Y[]_܇hdhh݇Zfn)PU~ktヽWrT+q8%F(\85 H͂ 8`xj/-êHyb %y|Һ aL'a8@^[X[~i1`̨~FVp?C.杧YLia$uZ HD!† z-^B]^K&0BY9PQg]S3Atj`{o77E3od+oXDB_z(OȊ X d5&YՂDY4 a*GzOMFCRY䌟ʊ)$4MHGb謁*ǐ,q;}iuz;q>HoFھ-H&%7ouUmκ$l`w%8Ʌ8mt{\]+C\'mWX`?8ĖT>-cXZ ,M f5!ĤM+  yrcZQ̌ʪ_u縝,bDZ5I*  P O>+Dm0˽'jf{GAd_OXDoa-XR?.1cⷂWjWeq [c5We[ doU;o Ȱ!9mzPכn''"pU)5t<y9,U#X;хoeҰBF=0ѡ^!2WR P8 .m&lZވ_Zn,(CIv>#΁#5%Պ* %a12KkvG a:qX0v벁S$snOvؑ80z]s^gڔ>pʺrW)z& @XF}՞si1>Ωs \@ Q<X>)by SST!5_`&V hL+."h^lMHS(G1i[=!V: 4#gc$h՚4v{B9j(+ or?ad t N asyءh&k/Zhpx[b#͙uy#WAmoèߊJˋA5L탲=?yP$$x8:GO U<5q8.˹b os򧳟-?SDg@K[/H).)0sSQ{ oi.ʈp_?3ۭɵJ[xA .4C')w[m(z{4vqswtjtk|cE;폤W੄4RRǸNQr0ɹ@/YȽs,"spOkKs+YԴ!* =QĪT /rPf6A(/a&VUp(JK5RC6!o 4mEө%tGc;qg ~:k0~QB{d̔lχ-)$ˬ$*#i/NrHXTK=AޠYjJ_qU`u Św3fcn@9Hgi@+Xlfq;q糏6?AjDFc6@+Bw'‰Z vA !!-A0lNL-]WEk~Rj) I-b^9JY}tS4}2S..Euopb&j L2 C O_9ā %9 |Q_ ; *A#6~c*n_\CEB&MQ@n=g0V(Rw M}?TEfz7t]NMtΓQn~J`:Y }q[9u6Wv>iQPq|ZWg}& WYy䟪X?]3ԈuhzH5V0,f0YVuf oXT!Όȹ 1<[~|BqW|fȧ=~, sa\oΕ+y<{=O-Oɉ=vV Qw?h07鎉ee֮LgbtUEkͻ:.Jiw_Y+J_3yftwq]3.0bfտ ¤~")t>I/A@$MF4Qܚ]gUͩ Pw/{MXʡUM-P1WhH厬W=Lnʱ8s'xC/wU(pCdvƫJbW4S]MX;Y,YLiU$J2t!e5ې S \=O5\] rd3r\*Wĩm]C}y%΅$īb*2u±bBJ=W1m䉸 ν~ʆd#eO5,ԒqnYÍ[e_b|QNY]-%1Q)yAfS$J9K2KfPiG](!یz[cxEKK+v -c 3IĹW#Y yk®zY&,#:+M=c'LGJQZ,7:AhYi 1& yh7Z<@* ً*ܜYH~$cajG҂~f;&#hrOF$Ԅ`րҼ^/FL">2\`Apb$RSJh8sC bK&$^N΂9&}ŕ'GFe'E@ 8GQz/M LWwf-ҬSC 6 j_, $!`%>"g3]RYKǞ晗fc [r[rǖ)6uG<~ƭ9i7*܌_/\˷8olz̾[)Hy6ꍳ-qO},~i1nM|j oyQ&W6SRFo $C IFWڇ}^H? ;j s:fV(V~fUDW(Uj #|h t2uD?+_U|'OP5zg2 ⡭"%- 33CUp^ SHVG;(0Gc,晊r9kr8+tS=<`pBBN0!c[7S !PP Wz?K0A)=:_> g|"fiDгg2br EݙLFM_Jd-5}Sx6Oc[lKnv::C܆~ە.3C J5 dK?ަGڴT:fԿ;zS95=e({}?6G7U?{dxczśӋ;q@1gZ^T)=.gTc[e7Nށ[^e= 뜫t |>~N977\:kǷT9O[*ũVǏPRB&AOǻ{;Wn{]kiC$w27o)(GU,Ww~xZ!| R\T| izpםoJu@"W(ؘPcKC . Ka.ޠ2\P UnZ:Z` _FhEj^ZWBZ{ޅR?vQVRATuSr!E;o4*忠k~?+-|,,)۽\G%LvYP>3 N꽤|CLe}wP-TreEg6j+o:4X?T7U>d|eFwߗV\J!/w [\cմMJ8En0A uLpQTn*# |.q\(pl&%ĵԹ[];,8( W2?d3|0hM̸Ǫl!/zE_%{^g)x smiEsfO~HaEn )YG?&OWVG*֡-A)JhՌ} ǻH,wF^A̦n Q+\=wUh]x{._ H'r ]FCD(2p{^K~wbQ/sXaԫZIuX5An,ћRx9B|X_ R[JQ?2/XKx{_/F;#~t2 /jE Z֚hG2nox.#) '{m4Eh:ߦFp\T x@ESSG$ A&?PyyVj5::zx;$8酂3ye= Z5bBj\{idTe{ ]P( 7ELUEa nvnܚTp+}ܠ5;;T`ɝa` 36oC^Luc3{U戊_ST3a(xxN:ܼ}po?`X8ߚ+w37ot)G郩*ApXvvkv]yup٫ 9qx)  Puoii;SyY4;Ċu`]#xr$]R^f6 6{;.b~mQ/MNNFG{;{GE-2,E#\(h;ťNFjU^&2ɉl4ﴭcz)WD8:^L.|0@z`E mfn8Wbyi'"+CO@\\q!?p ׅM!|ahJy |@ ؔ8M߽kfOa{ +bjlg?R#* LCcSFƌB47.eW&g_5=2JziOŝ/JW`ڍzzEϯ$X)NJN3u#Й$V M|מ譧Vռ# U1*|& 0~"iz߈[\E'(t3D^-Ͳh`2S $\}Y#S}RjǤCHc)ʄQbTCVCEL:XQbԡ.st[4yuhwX̩!)E:X:7}ԓH{y'|P&)_38o .u>/Mg0 **}oU>4$ve:Ĭ4Z"R;nezFEqҥ:}"U#?>iUU}{|YcyC%߷[o b/`ȧLsnBSWLq ltzl8i,BWXi_dN>N|u-ctsk%sSp.4MJr,INyYJlOrxuB~N9c bR\FQQ}LFTO8id1Eou;[Jzn^ݣ.fSQQ7WB-oܭfuVY>̧oB=5>AhSg~,{ieu=}-޴:mh>>M=y-v·xǗ[G=욂F\yIXxcWc]׭8h/}eXq; uW}SߋX TUBGMr&:q?@nv/q!}r?YuUQ0C,2z^j$"t0H6Q`$∺p-ǩ_hĭR^}D meJ{pص=H={~hcR$9ta6]MJ?kQɮ v0Я`ÿ03BnHg v[O >*# ŻW'n(<` ξ 2Ea0"N쿏"K%$@KGqw!4 RA v.X`^h )_C5ea99y-%02ql^೘X\+'Eѷz0/!F1ogGdtfĕ'pJaB85*|Ռ~\䉢#HG# +-.iݟziPːX*:̅'*IL}E'ZN_;0FKP'Ď Dѷ T`H;U62gz?:q oA_K1