krb5-fermi-config-1.10-1.LTS3> A AlpA?Bj= C ~@5Ur9"!&:COÉRed6e54e2c110021c810e51a07face9cadea65d2509ZdQf^~?ޫfJ?Bj~%H7f5l(\a>/51{>D'4?'$d  [hl| 2x!! >! ! !  !  ! l! !  !`  F (f)l*g+,-89x:>?DFG !H !I!!X!,Y!4\!L!]!!^#b$/d$Se$Xf$]k$_l$ft$!u%!v%w%!x&p!y&z'Ckrb5-fermi-config1.101.LTS3Configuration scripts to get Fermize your Kerberos MachineKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realmBnoswad.fnal.govScientific LinuxMIT, freely distributable.Troy Dawson Fermihttp://web.mit.edu/kerberos/www/linuxnoarchif [ -f /etc/krb5.conf ] ; then if [ "$(grep 'ups installAsRoot krb5conf' /etc/krb5.conf)" = "" ] ; then echo "current krb5.conf does not match template, moving it to /etc/krb5.conf.save.krb5-fermi-config.1.10.1.LTS3" mv /etc/krb5.conf /etc/krb5.conf.save.krb5-fermi-config.1.10.1.LTS3 else echo "current krb5.conf matches template. We will only change the top section." fi fi /usr/krb5/config/config-krb5.conf 1.10 if [ -f /etc/krb.conf ] ; then echo "Fixing /etc/krb.conf" if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS3 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS3 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fi if [ -f /etc/inetd.conf ] ; then /usr/krb5/config/config-inetd.conf 1.10 fi if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 fi /usr/krb5/config/config-services 1.10 if [ -f /etc/sshd_conf ] ; then /usr/krb5/config/config-sshd_config 1.10 fi echo "Your computer has been configured to run kerberos" echo "If you need a host priciple you should run '/usr/krb5/config/makehostkeys'"if [ "$1" = "0" ] ; then echo "We are in the pre-un and running" fiWUF* c AA䁤䁤AA큤-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-fermi-config-1.10-1.LTS3.src.rpmconfig(krb5-fermi-config)krb5-fermi-config@ @@@@JJ/bin/sh/bin/sh/bin/sh/bin/shconfig(krb5-fermi-config)fileutilskrb5-workstation-fermirpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)1.10-1.LTS33.0.4-14.0-14.2.3if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 >> /tmp/fermi.krb5.config.xinetd fi/usr/krb5/config/config-krb5.conf.aklog/usr/krb5/config/config-krb5.conf.aklogif [ -f /etc/krb.conf ] ; then if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS3 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS3 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fiif [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 >> /tmp/fermi.krb5.config.xinetd fikrb5-workstationopenafsopenafs-thiscellopenafsopenafs-thiscellkrbafskrb5-workstationBAA]AY@sD@sD@m@(@{?x?_?_?s>>y=TW< 1.10-1.LTS3Troy Dawson 1.9-4.LTSTroy Dawson 1.9-3.LTSTroy Dawson 1.9-1.LTSTroy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson - updated the krb5.conf.template file to version 1.10- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog - added triggers to run config-krb5.conf.aklog with AFS triggers- fixed script that says it's 1.8a - made the rpm a noarch- updated to 1.9- added .sdsc.edu to the FNAL.GOV realm- added .sdsc.edu to the FNAL.GOV realm- Changed krb5.conf.template to put PAM section at top.- Fixed it so that it no longer moves the current krb5.conf out of the way if it does not have to.- Updated to krb5conf 1.8a- Put back in the krb.conf, but with proper settings, and triggers- Cleaned out krb.conf so it quits messing things up.- Converted to krb5conf 1.7. I had missed a few things the first time- Added triggers for the xinetd configs- Took out the check that took krb.conf completely out.- Took /etc/krb.conf out- Changed the requires, put in a check before it does ssh config- Fixed a bug in the krb5.conf template (removed two 4's)- Made changes to the config xinetd script- Configured to use the krb5conf v1_6 stuff- Changed spec file so that it moves the /etc/krb5.conf file- Changed the krb5.conf.template file so that the Pam part was first, also lengthened ticket time - Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file- Made changes for pam usage in krb.conf and krb5.conf - Also removed the linking of /usr/krb5 and /usr/kerberos- Upgraded from krb5conf 1.5. Also put in changes for xinetd.- Made improvements to the makehostkeys script. I also have it check for the varias files (sshd_config, services) before modifying them.- The config-inetd.conf script has been changed to look for services that have a kerberos equal. If these services were originally turned off, then the kerberized version is turned off. I also took out the keytab-convert program, as this is dependant on one particular flavor of fermi kerberos.- I added the keytab-convert program into the config rpm, with it's corresponding manpage. It will also be in the normal kerberos rpm but in the bin area.- I changed things to the version 1.4. I also added the config-sshd_config script, as well as the config-hostkeys script.- I finished with the config-services and config-inetd.conf scripts. I also changed how the /usr/krb5 and /usr/kerberos were linked.- I put the raw scripts into the package from Fermi. These will need to be rewritten so that they don't depend on Fermi packages./bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/shnoswad.fnal.gov 1123264257@Q@R@4@5@>@:@9@8@<@=@;@J@O@G@L@@@A@I@N@B@K@P@?@C@D@E@H@M@F@6@7@S@T1.10-1.LTS31.10-1.LTS3krb.conf.fermikrb5.conf.aklogkrb5configconfig-hostkeysconfig-inetd.confconfig-krb5.confconfig-krb5.conf.aklogconfig-servicesconfig-sshd_configconfig-xinetdeklogin.xinetdeklogin.xinetd.onftp.xinetdftp.xinetd.oninetd.conf.templateinetd.conf.wrapped.templateklogin.xinetdklogin.xinetd.onkrb5.conf.templatekshell.xinetdkshell.xinetd.onmakehostkeysservices.templatesshd_config.templatesshd_config.weak.templatetelnet.xinetdtelnet.xinetd.onxinetd.templatemanman5keytab-convert.5krb5conf.5/etc//etc/sysconfig//usr//usr/krb5//usr/krb5/config//usr/krb5/man//usr/krb5/man/man5/-O2 -g -pipe -march=i386 -mcpu=i686cpiogzip9noarchnoarch-redhat-linux-gnuASCII C++ program textASCII English textASCII textBourne shell script text executabledirectoryRRRRRRRROVnyĦp?}[۶x -p/ЗBan i[ |ϞuN_;hޖsH8!mPK:7?^^___\ŸOzFc.lKɴvvv܎:׫]^DWxiYu{nsͭ56sKF N-Yn4^tݗWƫӳٛSˎ7쥉H#Qɤ*HA":AO y)iS S8n`^^yY  ;Ye`#Zͺ'f̟[e0i5޺]{"߿dY&'~ԺQ^Q`ᛵV%]gYgI;z=.HRK &3,h>DzF_Iţmu0z(<Tt'/VO&Ϋg[{';U*|{S]UD˥4wTãaus0RΕ HwM"I8 B/v:2|??>h,ڭk0TdE e .X4DZ,:EFjU^ͽ"LIZ/qvW/q3 ;UD}݅ZJFסma_Duq 'qˁls*vD*~OqNE0ŭušR?ZWJ,=_xar-cWKX 2A ߚ78jK:H86T>ſ暽E^O=-#U0Bhk%0f2N3u[`KW2%0 A4WXk)|`>wV،5QտEb K(d @$ 8E' &UC#Dg$)"?9¿"ZU00IG75w!.2-"CՓD18ȫ$i:5lwTa2UT/kd4bh8a*ArL%v^2L;t8"`jJ%/1P\: ʭ?ա%{t,j#n7#Q,#n8J\C=i9RŰŦ1 !^O GL:7UnkV;`V WE "}HLK( %DǸd&b?XF-BF$]=V`{qet4Rb뷒i+ьh-6w Shckp ^shOQօ[{:`ib*][&J0jظq4t;:î&PPjyG0gowt\Eլqyv|4jJu i1nSY*ׯXŜ`氭hsA7kogG ƅ:p:eC>g^r8`YJ%bqҸӢXUL6ek. z(l@|[G<*-w]Fvo%pj6Vܗ5Ѣk5ƫO,~TTxT?'(CߞSfzP3e`B=`vӧC~Kf}l7G)Q0տ#NOXzK1<VYGao$@Gka#nbEDJ;ң%Ԇv=PڜX߀:* 2U"Zdԡ/Q+XZU3֖۔_KXx,0]$Y5HT>'etQ 0 PjQuijU1h7_h:b29k>V4Z*WGӪO<[Jo_3+镠bLl3K*[jjOl5Pr*GX'seDeyڵe}ޘe/hrUd{tqPY&ĩEjdfY:5j:Hqp*Q-8ɖI㵳fmv dxZhÏ"i,;yƘe HF"ְ#c;6!b͜T&-$,aAFZ- 4bBPԒ =۴$0t=ŏJjF˫}?n 1 {VI`јPU(DŖ>wah(7Q!#NT"G _lIҩ#yW,A !_5:1NDRWޕ,P^2!2梗NwQJ i]5X7V-C,{Z>B*h[BY*dH$@w D6Ӥ̯J1: _ɕ684!lؚc KHOI=et#1p^[=^(8(G3BeF] 3u/ -kQ\+4>5Zdyo^-Dw*?WmbQ:skTଚWJ %I[nI :}XY {g͢O<BѷVmMHUA6`jucpQ|20 YT[qҟ&1by-WQ̕H9}-'ts@AB]"({ xN;'(w`绹z3<=Y7 @?̄:^wlO^K"|/$=XOG 0C֊H # #TWlP2":уa 5 W b:\sh-?w׊)ǧ0 Wd[c44$y%,cyipN93qS %{5/ vj)YcLaKЉ^:Ї:䙧 #[|s|zq.~D,0>A4c5 [he&6Z) zðwUz0*a^Ţo *j޵ J-MN`ݍvjA73VQgzגt:=:lXB96=>zeՆy#?rxyhEz&,: kAh'40%9VcH' l60%!38Hv"^4ֿ@%S=a]HjG!:& r ܯTP$h\4.؇0`0P:=UcԢXnF=u@gY;Gg&ώ~j`T0A<% # lq`hu08PpҀSZ@z'WѠxU|Vz` E\: hp6fZlAiwPpJyeNOVV'ST={hڌa&u*x >?b uM,j֤wHIWp}|y ٭tX3|PFU;x`…?Uki򸼩:%Rd'V.U4IM[㓣sjW ~jTn}F\ Ɛ2r2\}dU'N>˶6 :i.Fei79(@ }3 [Sz8O'D%6Ӱ5gѐ-<zVn=f\9ed#Pv^qQDaWʞݼR94B\  G BЯz-P!5ONNŻ iڴjcpB8 .Ih-[VRrNGXgX*HֵZ"R*ִH]?pH"M4_}FPe2 y9L7E&QR$iYT(6l!Ck>T YmE)jR{\KPS\x`<}@k'5EGr fdؕ 5ck72XԀ)ҏ֥*"x󔊗M{ a}7LitKO9h¶ō:OAKV  CGV>aP8?~MYȨb؀\P{#V98sNzͰ hE̢$cL]l Lя$i4Ff] lWrm_0v*^uzT[Q >HvھK&%w7ouUE95$̍cu?qGv!NNA 6zAM]! bkc|w0y'5-uO*F,3kVOA^NLOB^QpO_y-ϓ8wXfTVr 84eT'ҪT_xpW Նj(y! 2iXnU?sfQ 4ۡAPȹ"K" } kuDV *cB%2Z& x=ܿx% glhF b tN> /ZPޮLDMfHeA]F^_}8/ 60-a}%"sE ,AVթd29zdWnQ42 8f.Vu$PnIM- d7]Z;U B>۰]J)wsxtf쯘rNuqz>R@7(uY!bRL!6=G1ےS ov8Z蓘 }:c0~a¤{d̔lٗ/GV-)$ˬ$j#Cχ;dHgXTJ=Aޠ]jJ_qe`buŚwded6Hi@˙lqQsF?AbD 4Zm2@Bw'j! Z v:A ^E6RG&Hv .S<]L5w?X|E%Nh:ё rúK8L>+q^I8GDPlAFlN|j:de~}|UB]LIQBl=e0IR(v r M"t?ݔE骳fz7tz]MDmn9~JwW:eY }p[:uFWv=iaPq|ZЗA}&E WYٍX?/}3Ԉb: j7gdB&RV{"tn8́& / ۞ˆ}\-uf߼Yxϑ'.&X냫J=)  KNK)-iw~ܿ^=bX{')M\2N\5LCk方3v:ww˄sjSuyB3>?:ߕT?Uuo_l3Ƭ) 9Ekbnk4+{Z DB]ȋsR; r''@(%[uAivx4fNn|SXIf8V oXi<` ȕ%e־_f`<(SK vҷID x}%gMCdqW`Hp٤KQ˜B#3c>uhz,IV0,_&m.xUn6Z2&3#rnC 5sJ?0Kgjt:=\ ׏]c.㭹[f>2)y.*Q G[^1 pdb.yYY/!ݮoy}渤˺l,Sn$VʪR}dL.e5üft\Ռ Y/ .(Hr>6X}s;I '89`j<2eNm|75m:lly8%^FCj,cռa򱕎řm<)|.%};$y&S܏a*'0 _ĞOi w cc\f@gHo3wt*RЕlC3L&b,%<p1xu2J'ʽ?<9)xNEt B8u:}/dvݙЀxLXX\&_No [\f* ɗ,y!8B_ׯMِL`PBZp:,;ӷq~Ҭk Y: &J`>L`d|e)0gIy7҂ʜ>d° %d`ok^`b%o9x!h).@eLm?c&8J$k!oM@ؕ/Uu$Cg_3#g$H0̴"oYFgC +/:$!/f@]e&V+^Ia,{[X9?Ҧ7H#ƂՎm;&BhȰH1 y^tDɘ3D|x ,HZ'r$se<ɗU6sKL,M *+ &U1G)EE5mgүa +0Ef JUvOPWL@vQ.IXv0;_%ܐ^dʕo|]܋/U wA?;id=9I~[}y+m7!=y9#m줃KdH$EБKy?#B4Es9in{2~1s.Ows淏fo']ɻ(w"W΄wkiAьDX.'X)}<,NU|HM]u8 k6$Wԉ,"d%:,{S]Xfxȓ W9f>)Jcj ']%Ⱦf!U~m#-8=)1A.0b6AOɦ'&?i7|֎=$wx:sf@rxa NJ@ɂQ:3=9+>(FW&a壐HgxF !GYxݼ@owW6z 9m檳,e:Ϸe .ylޜmWw4gsҢD}_ȹ8gc.zެz{v/=.P,DP]He< HϑĨ\wŽ ` @5}GTҭR/.l?y2^1[Ӌ-{>psQzx1|N0Uv-I/HӞl^[ |i=_U|1F],t_94 en>ʠ8UL_QGp46_y[f{#GD9+n Ek @ ,;1澨hnq"sxl4q19 J*q{OqVj2V 0X$8IWVIϼ/Ue@dU+,yR6%aDjYSdA:ET/5ɳ%Ze;y5Ob%أ{7ḇ93@wtpk}N:ܼߢMw-~h:J\rw=;/t)GɃy JCu!n2]uҝV^ތ.DN)(F_iyvA-QWMqɞ|||Y["a@tZP&jBQE%+tW|4R"z"^L 3A=ŝDoyMVj)|z /:7.7M.WrI=:['_7Ph-ԲFt9s1:(8#. &\AXnyO~wT@9 %g*0쭺156lvEjF]V_-=K,67oW ߵ(GAYf0ч[]N2,o-'+KV!T/ƛ0I!:s$1N0U5ٵEsX T,s߅Ks͜[\E'ZP4mD^%Iӑa2S$\}Y#S_}ǤCHy{L%v^2L;tiG]]ʹo%Fb1CGA5Wv{̨(uEr;BUQ s7}ܓH{#X^ {ubäDѶ \W~4O4.z},y5XX\d0IDW&|^ztJ* 0cQ ՟{w6Av So˭ݓ9?ߧZ˝|J1ȟVTa<,N\|b&/~Y?,s4>YOyקȒZbҚJ6W3TsdӹPTvL Fءnc(uZiZ-/EtY:|ege>G|0[߸[|6akJVM)0(]U\QK,:KYYmə;KA6ȷsfo8x>]STK O><:>?-J~"qtG~5ͷ 9n+Jѡ[O6c¯æUUz>jdt`]Ke| PRd/C񻂳C3B!át梚zp#٬Go#Fz'~JYSĿVt]WaDwM G  l3¶aaA2l֑D9QӫGc3.Bb)1<hES }+GIT)a R]95bԎ5v٥Wa7" SRg(t>m6EȹLsoʪr:¯`yqf khX6l|YlƓUrcmU9QG꺢V4G9^df f=61~a <%fc%Dt,8}XO~ ;aRo4"=|bӗ ]I'+zKHB 6<*xk;p&"Bqp ) v ugmeTsogz?IoA