krb5-fermi-config-1.10-1.LTS4> A AlpA?BSj&j}`@d-xZVu9,A&}k0z!454d62a477bc0b3a4a2e9290f1d2bc3e113c1a18ZHoCq_Ze;O_?BSj~7`"t`@$YD;3vf| Nf0D|υZP>D'?' d  [hl| 2x!! >! ! !  !  ! l! !  !`  F (f)l*g+,-89x:>?DFG!H !I!!X!(Y!0\!H!]!!^#b$+d$=e$Bf$Gk$Il$Pt$h!u$!v%pw%!x&X!y&z&Ckrb5-fermi-config1.101.LTS4Configuration scripts to get Fermize your Kerberos MachineKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realmBByort.fnal.gov Scientific LinuxMIT, freely distributable.Troy Dawson Fermihttp://web.mit.edu/kerberos/www/linuxnoarchif [ -f /etc/krb5.conf ] ; then if [ "$(grep 'ups installAsRoot krb5conf' /etc/krb5.conf)" = "" ] ; then echo "current krb5.conf does not match template, moving it to /etc/krb5.conf.save.krb5-fermi-config.1.10.1.LTS4" mv /etc/krb5.conf /etc/krb5.conf.save.krb5-fermi-config.1.10.1.LTS4 else echo "current krb5.conf matches template. We will only change the top section." fi fi /usr/krb5/config/config-krb5.conf 1.10 if [ -f /etc/krb.conf ] ; then echo "Fixing /etc/krb.conf" if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS4 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS4 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fi if [ -f /etc/inetd.conf ] ; then /usr/krb5/config/config-inetd.conf 1.10 fi if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 fi /usr/krb5/config/config-services 1.10 if [ -f /etc/sshd_conf ] ; then /usr/krb5/config/config-sshd_config 1.10 fi echo "Your computer has been configured to run kerberos" echo "If you need a host priciple you should run '/usr/krb5/config/makehostkeys'"if [ "$1" = "0" ] ; then echo "We are in the pre-un and running" fiWUF* c AA䁤䁤AA큤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-fermi-config-1.10-1.LTS4.src.rpmconfig(krb5-fermi-config)krb5-fermi-config@ @@@@JJ/bin/sh/bin/sh/bin/sh/bin/shconfig(krb5-fermi-config)fileutilskrb5-workstation-fermirpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)1.10-1.LTS43.0.4-14.0-14.3.3if [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 >> /tmp/fermi.krb5.config.xinetd fi/usr/krb5/config/config-krb5.conf.aklog/usr/krb5/config/config-krb5.conf.aklogif [ -f /etc/krb.conf ] ; then if ! [ -s /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS4 ] ; then mv -f /etc/krb.conf /etc/krb.conf.save.krb5-fermi-config.1.10.1.LTS4 fi cp -f /etc/krb.conf.fermi /etc/krb.conf fiif [ -d /etc/xinetd.d ] ; then /usr/krb5/config/config-xinetd 1.10 >> /tmp/fermi.krb5.config.xinetd fikrb5-workstationopenafsopenafs-thiscellopenafsopenafs-thiscellkrbafskrb5-workstationBAA]AY@sD@sD@m@(@{?x?_?_?s>>y=TW< 1.10-1.LTS4Troy Dawson 1.9-4.LTSTroy Dawson 1.9-3.LTSTroy Dawson 1.9-1.LTSTroy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson Troy Dawson - updated the krb5.conf.template file to version 1.10- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog - added triggers to run config-krb5.conf.aklog with AFS triggers- fixed script that says it's 1.8a - made the rpm a noarch- updated to 1.9- added .sdsc.edu to the FNAL.GOV realm- added .sdsc.edu to the FNAL.GOV realm- Changed krb5.conf.template to put PAM section at top.- Fixed it so that it no longer moves the current krb5.conf out of the way if it does not have to.- Updated to krb5conf 1.8a- Put back in the krb.conf, but with proper settings, and triggers- Cleaned out krb.conf so it quits messing things up.- Converted to krb5conf 1.7. I had missed a few things the first time- Added triggers for the xinetd configs- Took out the check that took krb.conf completely out.- Took /etc/krb.conf out- Changed the requires, put in a check before it does ssh config- Fixed a bug in the krb5.conf template (removed two 4's)- Made changes to the config xinetd script- Configured to use the krb5conf v1_6 stuff- Changed spec file so that it moves the /etc/krb5.conf file- Changed the krb5.conf.template file so that the Pam part was first, also lengthened ticket time - Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file- Made changes for pam usage in krb.conf and krb5.conf - Also removed the linking of /usr/krb5 and /usr/kerberos- Upgraded from krb5conf 1.5. Also put in changes for xinetd.- Made improvements to the makehostkeys script. I also have it check for the varias files (sshd_config, services) before modifying them.- The config-inetd.conf script has been changed to look for services that have a kerberos equal. If these services were originally turned off, then the kerberized version is turned off. I also took out the keytab-convert program, as this is dependant on one particular flavor of fermi kerberos.- I added the keytab-convert program into the config rpm, with it's corresponding manpage. It will also be in the normal kerberos rpm but in the bin area.- I changed things to the version 1.4. I also added the config-sshd_config script, as well as the config-hostkeys script.- I finished with the config-services and config-inetd.conf scripts. I also changed how the /usr/krb5 and /usr/kerberos were linked.- I put the raw scripts into the package from Fermi. These will need to be rewritten so that they don't depend on Fermi packages./bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/shyort.fnal.gov 1123265602mmmxmymm~m}m|mmmmmmmmmmmmmmmmmmmmmmzm{mm1.10-1.LTS41.10-1.LTS4krb.conf.fermikrb5.conf.aklogkrb5configconfig-hostkeysconfig-inetd.confconfig-krb5.confconfig-krb5.conf.aklogconfig-servicesconfig-sshd_configconfig-xinetdeklogin.xinetdeklogin.xinetd.onftp.xinetdftp.xinetd.oninetd.conf.templateinetd.conf.wrapped.templateklogin.xinetdklogin.xinetd.onkrb5.conf.templatekshell.xinetdkshell.xinetd.onmakehostkeysservices.templatesshd_config.templatesshd_config.weak.templatetelnet.xinetdtelnet.xinetd.onxinetd.templatemanman5keytab-convert.5krb5conf.5/etc//etc/sysconfig//usr//usr/krb5//usr/krb5/config//usr/krb5/man//usr/krb5/man/man5/-O2 -g -pipe -m64cpiogzip9noarchnoarch-redhat-linux-gnuASCII C++ program textASCII English textASCII textBourne shell script text executabledirectoryRRRRRRRRFGhgZ{KU^ci?}m[۸pƿB8M .'.۫v:B|H@sg^$YvPmFh43?^wO¿OzF_>Vߟ 5.ێŽۑq?wAc}yZ'zѥ3^`ZfVxoۣV_86cKF -8Q>az޽{ ;;k/k'ӷ'—oKF:IUvDtyJv5Nw&;Y{Z %`4'ng=/uO<ϙ?7z+al+7nw}c5\O6'lQ y)Cъ`Rb Dcپ§J]R 0qAS~eeTUn$Fѐ!$b9YA JR C_tҁP"aX5<1BrXb#B?C+YeBac'5zW~ RQwh&WIteNBU4+*#L@>'˚j9&=9& M⿑f2L%+KTCˈ.F*T;Fb1#GAM3Z]H?^.H>%2▌5}ԓ{cX{^l ئapA{d'}m80Ң'ѹOjlިsJ}ޕVow X 1z?IrK4rKPQL/Io7F\%'bZJ4"½%0QcTf@tJ cl:i”i"ɺP4Z ~KWv?82W PhJyWØyq5CW<=1<7~sx*f姍ӳ{U UUQ0`1pN4E{ ˳zJT &kњP B??? 9X~ۋ?k.q@)w5< *p*~+/LǝUZbY,KwP`\UvO 4p 1(/QҴ)x'%-m轂V6pMNڍ*YTCik6wQ«O,~V\x ?\W?(CSfxP3e`@̓]vӇC ~Jf]l'QG !Q߬0o,@M'p\1H<VYao$@Gk!ðHXzGh ~]56+Vw-¹LըhF-2,kK6%XKb  ڡvf%5 $I*jaI]TJ-nb~#m#"*ѿ,3GQ37GjM{ڣi'[|?ߔ0Y*陠bLfjTԞZbje &?oC1ܮ .,x9Ɠ"[b, N,V#30 ЙĄEQӹ٪Hto'bZ[+jZ%^%#4gdj%B(BѰ!EYv :1&aYG4V- Z8L~Y83 l ʞϤ4ԺWmI!Ddyݦ%w .~FTZV5_^Cu{̀|Wh6 P"BUBTlsP#G 8tr`~cKNU62mȗla'F 4TND(/}] qɌ+ﲧX6N;o[`r!⏢&f2tӊeeQK'>p;mk(Ald! E2 p?]xF"%4++'DNB9R{ Q8$Q>4*tAACFi:b WNU\#)B F>)#$4zrX{Yd!X*Z!( ތZgU~Jct lيũ%0su捉 YJ2 `ܒtnA7!\Y {'͢G<BVmMHUA6`–XjumhӊQ|2PF,RkTc4^ef}~sC<&b嫸͕r[N怂6u|T'GzȊrzzzxc hB fkd~Z-O/j;u+S/%[B[Lуxq|ϧ#fI z¡QkE$x +6(N`a/B"2>g$ahf1rF`sh-?W׊)ǧ0WCd[ct¸޲cyipN93qS %{O vj YcLaKȉ^:Ї:䑧 #[|{trq.~Xah}¶>4llip,&k$ӧO+=o0Hbѣڱw{~rlC,RK}'NWa;C$qx2VHfgGO `0~QpO2R C@τ~^'Y=X!6xmS_mU >qkFnCL<󈣈j'rKj1TX^A>&޹~Vnjⵁ{#VNA"@NE+R%AujZŲoVS7Z=88<ݽSx~SS;{: )AoYgKC; /Ƒ0Oi1ɮl\Ń(u [$QLx'ת77f JIE+9=YyZO樺Y+E-h3PVu17hh 5AZz}"%mA[wMFtKAgKO9 ǍXw.FeI o}ͱal֔{Lc3Re^^Q $5o9(⏎w(n%^5+y|wx]u 2J2}dU'v>˶-@:i,Fei76({@ }3`)pJN XzG,8=mCgPrmqO@?a {1Q0!aZUZxK|АMS01נ ߤyT@tIB+P7h:0p28*$:kp?G#Zj=Xbu";tY m6|]4.7*MQWkո`g)6ވ⅔"I8"eQq tUy_-+Df _Qb-ZZg3Z?):Co6#)&Î@^3ȝQ&z6ȢuH?2@FPjⵎS*^ a=K3^z~-.$- ց 0ొUsHaXXS@8oʞ+H B Bhkrzr[+tKk~ُ^?_uBav۽ϮTd3opwヽ[YFCzЊzc Rh4#k 0x;IcШ Eh T2H<6 )͌~!*jMCj`ʗ#En‡W^SkڊR`1eWjRR,p#y+®"(Q g27" nч89q8\muV6NRWۮd?8/j`K[*u/_*Fi\`i`5 ' OL/B^RpO_y%σ8wXTVr $|$_937g0/'<1֑@^1%5Ad0,cqi(A4L&} Ca.3R6+to^+b9yHHhRe]HQ334H qKN B &X`g<䆦d B+++%+8|w3m tCWZ-de?[9-Y$ؚ@ŧp8b1i}[ =ȇ9ohf7y C֘hOcO'Pφ+3F1rOg\2957Fki|~xYiɬ `7 U0 -o٢4qHdn^>(CM%eƩ9a60TE%pݞ+wf<~:ٶNl2qI3DDˁn2:鋽OHHATA?8ݤ\C4mݺBk8tcqڄ7Gc';{GqjIV$.H yIR*IAR,-,e(UET%S*[T9el4{dFiᮾ:ڐi SfzU^,@|- mV .񽆥XTT(۟KM9TI ڌD{kdt|%M{Lp: ֵ1q,tP(TI(Q9 S)m6/.R\.6ԞfsV18|C?! UB'7h8201ٍ:rb-;2DY8, Ǧ;!E{(k)*iZ6ril'Ns2QͺVaL--*G+r-4݉ZpB!d<7"$<($`ԑ C4SeE-E>!_Q3GFNtd7F&%^nXwv gR@5 T3R d'V]Z( 6K٘s+F tȰ?"ŋ[W ]w21e"2$I3)4lw]ή?]u:6:En)]1z 딝g%79m)Fb[{a9K<`ϫF|CHwU 2ˇgD 5}5^2K]A\QEt:c7 rF ^NeStfqݿFԭ}fyrIb]P|. '<<@n [?7VR&"[p 2Mq}Uqe ,l,&J%,R{>*ݵD^_/YS`}1أ6:08*܆ff6RT0&̄8A4>K҃L+?&].xUn7Z2&3#qn" 93_h6|ogq|ǻ]c.7̕ߠz<6OOc=vYVm.%A?K&撗[2陹V獝oJ긬+ͦ26Lbe*kG|қYvSkvCU-KWjQ2$:=^ށDJ8Q9, deι)&kWY)sj˸yri'Fh:z |UV3=/xR6d\J6]ewI8M$ZUzOa@9=*:@&'0ڹ,B'  ͔Ne1J CWV [041ճ\I4 p((w4ϋ x99ba._Զ_‡z!trܾzug$«|`*2u|\J5S1m%Odɳ ~mʆd#?,,Ԃ&qfؙ[few>Rb|UY]-mtsRL,, 0/FZ@ӧL@[c]Mߙ+Z[Qpo 3s$_H&6i<+YHzY6 `$R< 3HeּِDK1IKDGPz}(ʄWR^V$V\W6~d?Ĉ t#iAGfo;@ /,'2lǣ2jL0ji^]!S`2&t )^e) r8  %!BNݐd,6OK*%^΂I& }ŕeN "@p30_HNEVT UOPWL@P.KX1;_%ܐ^dʕoy牪Y{ uA?Ixo=7ɗ<_@7ODVf^f{O^ț&Ƶ7;6R:/K3t$frPϔ}9yG9yןd<7,wc|Jaۜ6=M滒w?-P6& \ӂ\:|O3L'#RxXxl-%PE(w% xbk*~T^q"LFNx91Vzz6ܜkhݭ F,`5v0c_-tWUUJѽqGl&A.:5xn+D}Ue )S.,3J<΅+ݜu3`HYY[15z~ߏ[{\BIѻ*m|dH JODAЫ'XLPqSI⿴f֎3ڰV;楂tzۊ)Oo6T`Q22<7oNѶ;3nɋ׿UfƏw͏!\Gs}r7pٟsUh:gw\h8?ؐzpP ,]m ju֓'ӋL/ޜ^pzB>SŪGM]SP5+v*R4VƭO(=wbKW&,{*1vC(i{L۝W{;nsmԂ6MyJ8^^|X^sUXm |5ia[a71 J(ڠݧd@% qnVhΨ??|o4n;EǪl8B ]2cH&NVk-%bH6Z.{W7%~%in'$^FyЗ.j`8\4^N-G{q@qo6- e ƉC|20.UKX.SAaE,{aCOǡ n/6Ëb;,k20B*z= K N/a?hw`aM+MZSJVDʆxXA'풯A U(MPtv`eaL%O##w(MF*>zUPtT\ıZ\^.J?w@ ґ贔Ǡnxn2 QS ]w=o AO;%|X5 h&P{Hl8큒E<.20$8IWVI/TeV?GˋT$WY("~m#R[m^_ekxnWV}D dR6*Չ 1\ naRLD%XC3sk f2ș9Vꩯwy6+ot9I,' L-]$y|y>;oƋ7밻-+ჹrb=;/գt!Gɽ{ uіY4[u Vnb.箳 .RPM)| ,NH-jqrxW>:;;on/ڭ?k(r%-Z$Xp Ģ@}:3UԪ1ILȱz,χ=:md?ٛ 1 VG~<߽O45.zk|,)W[d 0DW&|yxBǫ4*.cQ ՟E|sWSt+Rw˿X'׿޿rC]_ϖ99>r "i_+|5^ؒS7^_)Z抷T@F| 1cDBf ꖃRćuOy]vVٸ^{$snv7lЇ3vPjUqFQ/)q긧OSQwܓWmso| q|OH @?8<:;)R~"qK~5w 9n+vKOa҆_Ej&|N5Ag!8QWaFʐ_;NՒ!wgχ!fZBCiW0<'G{CFԍ@jѯ'yy Jٮ$V4XaD?BÁ671Vqb0砃@Y`;1z E9qׄg4֟]&Rb=z!vT:JH૥aD<#*pzDCŚ:GUB(WnL lܰ5?08Ə.5B]wcf cR]:b tjP:51AJq[k#'C,صcEDᎨ_0h/ܐN'ͦh:)|-?YYUNG/O\Lat s2y>操8dCi &bpI[]WjƔ3(0'KLC}G܆ s8`@^q;6w~dl켢RM{)߻a'=^ꍀGOWr1C3+dSZr YH0(u ptG S$[#"I~!Q`F?/qØKrZv{Ctiԃ vX^`StP>5jh˰e􆾖ƹjqX^peՒgOc"iiBq2Wl'j=@0_LA10tv2S^``qN"zkVjԛִIkv^!nI tI8TUM2_a.;uΑuEg,oO_;FIP'ĎLaO2@CYa#^񏾏~z܀9;P^P