krb5-fermi-config-1.15-1.LTS3> A AlpA?DFOj4ħ9+%7vڤVROvE!&06\:c10349f9faf6b23bfb97c45a8694805e7c390abbbf['CIԤ}k%?DFOjsp)[E!Ne-a˟Ŷy0lKT3ydNX>C&?&d  [hl| !h!! .! p! !  !  ! \! !  !P|  6 (V)\*W+,-89h:>?DFG!H t!I !X!Y!$\!<!]!!^#b$d$,e$1f$6k$8l$?t$X!u$!v%`w%!x&4!y&z&Ckrb5-fermi-config1.151.LTS3Configuration scripts to get Fermize your Kerberos MachineKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realmDEbeaker.fnal.govMIT, freely distributable.Troy Dawson Fermihttp://web.mit.edu/kerberos/www/linuxnoarchif [ -f /etc/krb5.conf ] ; then if [ "$(grep 'ups installAsRoot krb5conf' /etc/krb5.conf)" = "" ] ; then echo "current krb5.conf does not match template, moving it to /etc/krb5.conf.save.krb5-fermi-config.1.15.1.LTS3" mv /etc/krb5.conf /etc/krb5.conf.save.krb5-fermi-config.1.15.1.LTS3 else echo "current krb5.conf matches template. We will only change the top section." fi fi /usr/krb5/config/config-krb5.conf 1.15 if [ -f /etc/krb.conf ] ; then echo "Fixing /etc/krb.conf" if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.15.1.LTS3 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.15.1.LTS3 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fi if [ -f /etc/inetd.conf ] ; then /usr/krb5/config/config-inetd.conf 1.15 fi if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.15 fi /usr/krb5/config/config-services 1.15 if [ -f /etc/sshd_conf ] ; then /usr/krb5/config/config-sshd_config 1.15 fi echo "Your computer has been configured to run kerberos" echo "If you need a host priciple you should run '/usr/krb5/config/makehostkeys'"if [ "$1" = "0" ] ; then echo "We are in the pre-un and running" fiWU* c AA䁤䁤AA큤DEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDEDE5512a9f13b129646cec3859d68e29b40bfd08ea5d8875d25205e6e9746aad4b37a4abca39e1b57e957b5edf7002cf42821e55b923d55f8c4189d1a49ed5587bf6107760f5a3734c69d902915adb873a288b4968c2fae0e3b9758ec5eaa43d0ddaea17cb077ac8c8919e5dc5f47fe04c64422f8e499d92b99687a4c24bc136ad55e7d83c2d01e4aed6fdb5889584c682a1ab206cd440f7abba425f069cfb73aa60f9f562547d793b1cfb123a5239450d3a372843504dcb3375a02957dca370693fa3d02abef4525dc8201fc6c0cc95643701a813e6ca553d628215d0074a941c89854f43208eee0bee3d3ebd7b4652e4d73ab91afadebc86a71e2da8bc2f5a0f5f483b251acaa078370f365e0a3f0728d9549861332414e4594327ef58480d891b7df7be5a207b7ebb96b9aeb1eec252bd205395c2a7cb9a6dd1a7545070432377a4abca39e1b57e957b5edf7002cf4283def813d7629231585fd75709eba7d37569926364da0af8aa32e339ee4c5ccfca2017070087819b371722066b0e0b25f61cf95fcaff053f740297d68839e2129747f93ce642e40fb12e1120a4fe81b1fb85414c4e359a2847745f56a00e8fb065833efd4c877a26a2af0970ce428f7f0f56a98bdfd28fcea3a10eb3ded108fb6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-fermi-config-1.15-1.LTS3.src.rpmconfig(krb5-fermi-config)krb5-fermi-config@ @@@@JJ/bin/sh/bin/sh/bin/sh/bin/shconfig(krb5-fermi-config)fileutilskrb5-workstation-fermirpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)1.15-1.LTS33.0.4-14.0-14.2.3if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.15 >> /tmp/fermi.krb5.config.xinetd fi/usr/krb5/config/config-krb5.conf.aklog/usr/krb5/config/config-krb5.conf.aklogif [ -f /etc/krb.conf ] ; then if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.15.1.LTS3 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.15.1.LTS3 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fiif [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.15 >> /tmp/fermi.krb5.config.xinetd fikrb5-workstationopenafsopenafs-thiscellopenafsopenafs-thiscellkrbafskrb5-workstationBAA]AY@sD@sD@m@(@{?x?_?_?s>>y=TW< 1.10-1.LTS3Troy Dawson 1.9-4.LTSTroy Dawson 1.9-3.LTSTroy Dawson 1.9-1.LTSTroy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson - updated the krb5.conf.template file to version 1.10- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog - added triggers to run config-krb5.conf.aklog with AFS triggers- fixed script that says it's 1.8a - made the rpm a noarch- updated to 1.9- added .sdsc.edu to the FNAL.GOV realm- added .sdsc.edu to the FNAL.GOV realm- Changed krb5.conf.template to put PAM section at top.- Fixed it so that it no longer moves the current krb5.conf out of the way if it does not have to.- Updated to krb5conf 1.8a- Put back in the krb.conf, but with proper settings, and triggers- Cleaned out krb.conf so it quits messing things up.- Converted to krb5conf 1.7. I had missed a few things the first time- Added triggers for the xinetd configs- Took out the check that took krb.conf completely out.- Took /etc/krb.conf out- Changed the requires, put in a check before it does ssh config- Fixed a bug in the krb5.conf template (removed two 4's)- Made changes to the config xinetd script- Configured to use the krb5conf v1_6 stuff- Changed spec file so that it moves the /etc/krb5.conf file- Changed the krb5.conf.template file so that the Pam part was first, also lengthened ticket time - Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file- Made changes for pam usage in krb.conf and krb5.conf - Also removed the linking of /usr/krb5 and /usr/kerberos- Upgraded from krb5conf 1.5. Also put in changes for xinetd.- Made improvements to the makehostkeys script. I also have it check for the varias files (sshd_config, services) before modifying them.- The config-inetd.conf script has been changed to look for services that have a kerberos equal. If these services were originally turned off, then the kerberized version is turned off. I also took out the keytab-convert program, as this is dependant on one particular flavor of fermi kerberos.- I added the keytab-convert program into the config rpm, with it's corresponding manpage. It will also be in the normal kerberos rpm but in the bin area.- I changed things to the version 1.4. I also added the config-sshd_config script, as well as the config-hostkeys script.- I finished with the config-services and config-inetd.conf scripts. I also changed how the /usr/krb5 and /usr/kerberos were linked.- I put the raw scripts into the package from Fermi. These will need to be rewritten so that they don't depend on Fermi packages./bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/shbeaker.fnal.gov 11570559985`tuVRQPTUSbg_dXYafZchW[\]`e^vOij1.15-1.LTS31.15-1.LTS3krb.conf.fermikrb5.conf.aklogkrb5configconfig-hostkeysconfig-inetd.confconfig-krb5.confconfig-krb5.conf.aklogconfig-servicesconfig-sshd_configconfig-xinetdeklogin.xinetdeklogin.xinetd.onftp.xinetdftp.xinetd.oninetd.conf.templateinetd.conf.wrapped.templateklogin.xinetdklogin.xinetd.onkrb5.conf.templatekshell.xinetdkshell.xinetd.onmakehostkeysservices.templatesshd_config.templatesshd_config.weak.templatetelnet.xinetdtelnet.xinetd.onxinetd.templatemanman5keytab-convert.5krb5conf.5/etc//etc/sysconfig//usr//usr/krb5//usr/krb5/config//usr/krb5/man//usr/krb5/man/man5/-O2 -g -pipecpiogzip9noarchnoarch-redhat-linux-gnuASCII English textASCII textBourne shell script text executabledirectoryRRRRRRRRljUȈ)?}k[۸hƿBK 3;g::BI@vg]$YvH(sۧ}f %iiiݴdzs}}ɣgӦ^}Օϭ'r-&3"~uݮL/Z4o4]Ǘdᣛ 7zn:Y@&99Ŷ/[%SS}`q]vG> :A,"͢E`‹+|/b)Hk ؗUl}q.#_#}-}#.151l U-7ihї˜Z7gx 7b72!/e$:1,J"Q1j_IPw)3񩸳fm7xp^^I k vG%GHQ P(2I#: $1I!Ӫ~ FiV=*~py0M hbqH,iy4Ƣm8L]*breLS^F -g2d")+x.5]];]P%Fb1GGA5Zoyuhw~*h@=`$e$ĩk/p"'|Ndd/p`EjclkV]V W֏T*=CNi"L' $DƤt&b/XF-B1$}B+o8mI=U팹29?)OP3p{ŴhF4Q6Ͱ]"%ZudC)q4C`aF1֞.Xp5y)hx4`4t6#0Zg{"%n0+1_,ԽZ1۝Ã% W`=/?mj=^"EBZl99|wVp-.J+F1'9ljGa@)p#*?:hTF^lwuYv/N٘O_,` @DC"([Bw:Tkfj-EIE^E ȖO4p (@"OeSNK ђv6PmNRYJcM,t|iZ0]dj^ïf&u ( P`ӡO>gcx`vp((_@ͦPoXZKU1<U[Q,@KF\7u""yGh ~~o~JP\m\fjV$Q!jJ+jQ`QKb  C$3"kIZX.&*-QN"]bB*X'XfNoâUѰ-KoQ̕JP1%X-r5ol5P@SXOבω\˼"ks1& ^M⠲M0 -$@3z'L)p#%ra%jԒfjd*#]WjpqMx;GLJ[o6m\ ţ ţ~^eliH^u[cbg0D3rpf e\mjݫ$ >#9D{^H0Q 닟:(f~-kz7gb'A916P-}MnlCFE̿ؒS%F/wXpCdktb O]ʩ d+1X22am ]d:E/n3)x &Һ, WnC7i[Xu$9|RW[B[*dH$@wC6Ӥ̯J1: _ɕ684!|ؚKHOi=et#1p^[=|/im9P2FD简Šxb-27c};Uīmbq: kT⬚WJ % I[H):XY {'G<BѷVmMHUA6`jumpQE|.pH?TMַL{e0CMnc4 2_r[N怂DP?43 ewPOsYSB ՜G>ۜѭg=&z0I!`\~ZO?:ەB[ЃzytOcfI z¡QgEx1 +60^څ"29g$@@ TA887 Z O2ubux) mՠ + :`^)D^%a;SL"!~|K݁pd% tW"N&yYlHpxܡ _&, OcXMZɷK$@Gg5={V{$Eaz}FT'U J-MN`ݍC?C=+I:df G=2BjüqvDŽQC9ˈa4.U=Uxtghzŗ|hy$]6`ňgGǤxT;C/A^RJ’|(%b 󁢑cVNcʥKLCfJElZȁMh,뻇TwNEmqzD1dda_to1&g #0p}JHWOwOp ^61h k9&ȮP|ϥ㈉W xi0x'_׺77f JEVBߋ. z8frԃߏ; hsf.`Vu 7hha 5aZz-ISny1H8)*rxEg`kM^@g6ESQ.RжFTA(u.CQRϿl Г{MsRؓMk*CqA5U:(w(޴ye=/}|wx]l-;C6Jn֝Jzu@aaBst1 /'aEϐҶAmCzz`u`xTVZT?`{k 6nBƒx;knWNY75|TZ.$Ȝ]Yt#,p-e>䌉s y4C ~ {ٗHXf]Ӕ!hJ14LJŇ) iڴj [cpz*9Lh -[VBsNIGUnX*G#P֍F*R:ִH.]NpHO#VO4_}]HUP2jE}LU>E&SRAiYT((Ck>T YmE)R{\KP\z`-|  UG\ bD[m3ȝQ&.EL "i]Zb)1Bk7:O)t 7( Hև)ywgh6l[HAYa9VQ%ѿuUUy/ku"X4EBU:PPɥ(H{qڿ/44C}a-zn)PU~ktヽWsT+q8%F)^85 H͂ 8b xj7Q.úHyb,%Ry|ǀҺiLa8@^[X[~i1`~Hp?G.杧YLia$uZ HD!Ć -A ^^I&0BY9vPQg].S3Aj=0>MQLc,[9,$006y5)/YCMF0Q*F'-0lطʡCvS?hԅ@e/9gbòbA,!MS1R7;RF;k`3$K::0${NA~n_Gyn]z'΀PG);تVۗeɤ" 歮آb2n[P4 1Oܑ]}$TP>ý~o`Sכkek4z+NRqÇo1vu+cYZå'YMAH0uE91n(~B=bHly܄Ed3Wk9n)=V (hҠJÃ#Eh;TC;ȓ1D r7vʯkr>hr)D!AYQ[X ԯTX 򕷚mUY*X.U5YF")D32lH^> Hy16voh$j:07kD^N( b,֞m!,y4fCFQ$|W%H:UN`o`6-/N-7α$ ur\̑II'܂1ljXG|ޒðK~٥5D^(:,PP uUmqq7{;R}7z]q^g۔>ЋRe]VyحG}ciE {M>j4_'s \@ Q<X>+)bz SST!`&W ??4QAB&PѕV YwNl y^4 /&P$(G1m[=#V: 4#gc$h՚4{B9j(+ or?id t" as{ءh&k/Zhpx[b#͙uy#WAmoèߊJۋAL탲=?yP$$x8:'GO U<6q8.ϕkBnx3?\'Bܸ$".^ PzABwIɅӜ^gx{,Nx,vPF|LJ3nMU7LoOB[6Nʓķ w^\ Tx虡F/ h@V9>%B5јʱ\FM;q[b$p`4Yp|]8X͹l'%Uw7ϓ92d; Ggt Qsu}qU)<}YCy au h)(K˃?[T4IP&IP|3w;tsn}1K.lMr깮iU6/_RpښK^{g3u T;6Zpwgy?S:G$LlV& >F4vݽ{w&e,6)p28ssWa%ua@6>Z90o`A%.߂ϣ ׏]c.Lʕ< )'ĞxDxic0`[t\2|k_&3WCt1QEu4OyֿݏIҬUbMr|3:nkyn鸮1Ae\aRYM?OPe:}lُ$w %$sX(s[nMծWϳ* Pw/{MXʡUM-P1WӱhHM䎬W=Lnʱ87xL$_HfLQ:' _@0WޓibO'4)0̉v.)Yշ雌I:FVeCj!fFzk: NSyF`o2?#G ajrU{@U?DNڗWr;]\h LC-.,./['+*-sӆQxLnwlH&0R\fTSOB-9h 疊58Ui^vk5,RBƬrj~U4gIyʝ>tʰK%d`_ok^bbȕ9x)ci%.AeLSrw?c&8Ju$k!oM@U/Uu$Cg_3g$H(ʵ"_oZG-++:$!/@]'V(^Ea"XX?㍹RXՏԜG1Fv$-c8&dwt W=iIoBE{w匴ib\+h /!CWb/LWӜwx4=ޜ涾'yW?} yӹntxC岚ND`ʙnM5:Q(螙D`UcRxXx l-HE(%xb{*~T^OD=FFxaWzez6Ԝkhݭ ,f`=vÈG*b9tҪbTBb03QtĬ \Q'쫊("߰2C\ؼ90 OU\|7FIkKhq]Џ+kJ2_'iAIY9zD1 J[*6=1QI;]>/ nq!ә 4 kpBDP gJ6tg{r&W~QYLG!嫏6jB@Rz%#ls۠UgX⭏2Η2%/sBŹ|\(߳|+Ǧ|{@лw܅%BtB{ko} D!yn{6IZoE!zS;#oGQ)=5헪 R.2K^)>D)ze^(bP CfLF]WJ(x{)d7B Ӊoµ>KxIQW" 7&-H'L驌pZ>V5vq,|F738}@93SX^!b"ua}Cxv 85^~ؕYhn=^U!ODĬ`|߃ãuv |wVlZgENM5Eo@: ϟ>,޸ś7o\T<LJdI&};Srj]SdUk~^?̲I^MtU:|>~NH7sBԞeRqEa|\l~58X K3F(~G)L=2ی.%ިx d%xM~깣A`n*M;7f1,?WM3AU+}>0Qvmi_6.~wbQ.F$œ*VԗK_Aw+XSr{,yQ7 ~u|[LϠbO`+|)]/ =^<'v#@tNAuuKmzKBO:҄rhcxuj^\7["#yUb̿)g* CjBKFxz-Jau^#~c2MM*WS] !kth*.,yQPR;ۢ5BZpkzc*lfu\0i<_g[eTVbk9Cw*Wǐ#?Q [nty~JJ뤼+)Oԟ1^ٝNH 9Nܘw ۽~y$L_|MkށB̙h1ɀ;v]k}upMN[W O_qo}zA-QMQ|tww^["a@eZP&BE1+u4R"z#^L eAVBo'2EVj),| /}.uPv}Q]jAU(HUnK|)LHKѽS ,J&O*겳*#>h-oܭfuVY>wmkfu+PǴ. PYr[{Zitz9<}|*{Z}! Q&nvtk p OG'{'`=]_ԯF,wK\Faq@$n_u; Rp(ئD0I6Q`0ܘp-_hĭR/}|C meJuy8kqpq*.b&E r R^IXvK)ѳK`5nQz`_c2'Q߰)ESLvHļw$/,=Ӏ"yUtǕDz3mؽ2#bWgދA RL!WA/rׯ]9*N kQɮ v0/a xa#C!73I-Z'EOWV~eݫ7E_AO>Ӎ/8oy }Cn L'bps[]W4T0 KLC}G݆ &8`]C:pˉ 3jv^1I\OBW彌۰>ތ菁FOrrgC3'\Sur IHA]oLh4 8ĔN˟0RgI=DyK Tϱo70 &5^>* y(D]c_yYB cIx>0(:['G&(ĂӂbأG#KtJj'ie&aA+-Ι&Qif|v}svڕyV<.v&uaA/CbP0LOоOfkw}؏%bKty|# 'nx,Ϳ́jYZG3^?=n7NnZX