linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-02-03 06:27:16 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

clean up old to-do's and update mitkrb5

Browse Source 
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3422 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Larry Lawrence 2005-02-09 21:53:24 +00:00
parent e72dc56eda
commit b6293773c6
5 changed files with 210 additions and 171 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
general.ent
View File

@ -36,7 +36,7 @@
<!ENTITY gnupg-version "1.4.0">
<!ENTITY tripwire-version "portable-0.9">
<!ENTITY heimdal-version "0.6.3">
<!ENTITY mitkrb-version "1.3.6">
<!ENTITY mitkrb-version "1.4">
<!ENTITY cyrus-sasl-version "2.1.20">
<!ENTITY stunnel-version "4.07">

4
introduction/welcome/changelog.xml
View File

@ -22,6 +22,10 @@ who wrote what.</para>
<itemizedlist>
<listitem><para>February 9th, 2005 [larry]: Updated MIT krb5 to krb-1.4,
incorporated offical patches for autofs and moved cracklib to required in
Linux_PAM.</para></listitem>
<listitem><para>February 9th, 2005 [randy]: Added md5sums and index tags to
PPP.</para></listitem>

49
postlfs/config/autofs.xml
View File

@ -46,13 +46,42 @@ installations, so be aware of the risks before implementing this feature.</para>
&autofs-time;</para></listitem></itemizedlist>
</sect3>
<!-- <sect3><title>Additional downloads</title>
<sect3><title>Additional downloads</title>
<itemizedlist spacing="compact">
<listitem><para>Required Patch: <ulink
url="&patch-root;/template-&template-version;-patch_name-patch_version.patch"/></para>
</listitem></itemizedlist>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-strict.patch"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-bad_chdir.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-mtab_lock.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-non_block_ping.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-signal-race-fix.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-sock-leak-fix.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-replicated_server_select.patch
"/></para>
</listitem>
<listitem><para>Recommended Patch: <ulink
url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-multi-over.patch
"/></para>
</listitem>
</itemizedlist>
</sect3>
<!---
<sect3><title><application>template</application> dependencies</title>
<sect4><title>Required</title>
<para><xref linkend="BLFS DEPENDENCY"/></para>
@ -82,7 +111,15 @@ Recompile and install the new kernel, if necessary.</para>
<para>Install <application>autofs</application> by running the following
commands:</para>
<screen><userinput><command>./configure --prefix=/ --mandir=/usr/share/man &amp;&amp;
<screen><userinput><command>patch -Np1 -i ../autofs-4.1.3-strict.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-bad_chdir.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-mtab_lock.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-non_block_ping.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-signal-race-fix.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-sock-leak-fix.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-replicated_server_select.patch &amp;&amp;
patch -Np1 -i ../autofs-4.1.3-multi-over.patch &amp;&amp;
./configure --prefix=/ --mandir=/usr/share/man &amp;&amp;
make</command></userinput></screen>
<para>Now, as the root user:</para>

5
postlfs/security/linux_pam.xml
View File

@ -53,8 +53,11 @@ url="&patch-root;/Linux-PAM-&Linux_PAM-version;-linkage-2.patch"/></para>
<sect3><title><application>Linux-<acronym>PAM</acronym></application>
dependencies</title>
<sect4><title>Required</title>
<para><xref linkend="cracklib"/>
</para></sect4>
<sect4><title>Optional</title>
<para><xref linkend="cracklib"/> and <ulink
<para><ulink
url="http://sourceforge.net/projects/sgmltools-lite/">sgmltools-lite</ulink>
</para></sect4>
</sect3>

321
postlfs/security/mitkrb.xml
View File

@ -4,11 +4,11 @@
<!ENTITY % general-entities SYSTEM "../../general.ent">
%general-entities;
<!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.3/krb5-&mitkrb-version;-signed.tar">
<!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.4/krb5-&mitkrb-version;-signed.tar">
<!ENTITY mitkrb-download-ftp " ">
<!ENTITY mitkrb-md5sum "18d5a6a8e1cce120536718d39a052a87">
<!ENTITY mitkrb-size "6.3 MB">
<!ENTITY mitkrb-buildsize "64 MB">
<!ENTITY mitkrb-md5sum "2fa56607677544e3a27b42f7cfa1155b">
<!ENTITY mitkrb-size "6.6 MB">
<!ENTITY mitkrb-buildsize "55 MB">
<!ENTITY mitkrb-time "2.55 SBU">
]>
@ -86,7 +86,7 @@ If you have installed <xref linkend="gnupg"/>, you can
authenticate the package with the following command:
</para>
<screen><userinput><command>gpg --verify krb5-&mitkrb-version;.tar.gz.asc krb5-&mitkrb-version;.tar.gz</command></userinput></screen>
<screen><userinput><command>gpg --verify krb5-&mitkrb-version;.tar.gz.asc</command></userinput></screen>
<para>
Build <application><acronym>MIT</acronym> krb5</application> by running the
@ -365,7 +365,7 @@ be activated, usually replacing the server from <xref linkend="inetutils"/>.
<sect4><title>Additional Information</title>
<para>
For additional information consult <ulink
url="http://web.mit.edu/kerberos/www/krb5-1.3/#documentation">Documentation
url="http://web.mit.edu/kerberos/www/krb5-1.4/#documentation">Documentation
for krb-&mitkrb-version;</ulink> on which the above instructions are based.
</para>
@ -378,184 +378,179 @@ for krb-&mitkrb-version;</ulink> on which the above instructions are based.
<sect2>
<title>Contents</title>
<para>
The <application>MIT krb5</application> package contains
<command>compile-et</command>,
<command>ftp</command>,
<command>ftpd</command>,
<command>gss-client</command>,
<command>gss-server</command>,
<command>k5srvutil</command>,
<command>kadmin</command>,
<command>kadmin.local</command>,
<command>kadmind</command>,
<command>kadmind4</command>,
<command>kdb5_util</command>
<command>kdestroy</command>,
<command>kinit</command>,
<command>klist</command>,
<command>klogind</command>,
<command>kpasswd</command>,
<command>kprop</command>,
<command>kpropd</command>,
<command>krb5-send-pr</command>,
<command>krb5-config</command>,
<command>krb524d</command>,
<command>krb524init</command>,
<command>krb5kdc</command>,
<command>kshd</command>,
<command>ksu</command>,
<command>ktutil</command>,
<command>kvno</command>,
<command>login.krb5</command>,
<command>rcp</command>,
<command>rlogin</command>,
<command>rsh</command>,
<command>rshd</command>,
<command>rxtelnet</command>,
<command>rxterm</command>,
<command>sclient</command>,
<command>sim_client</command>,
<command>sim_server</command>,
<command>sserver</command>,
<command>telnet</command>,
<command>telnetd</command>,
<command>uuclient</command>,
<command>uuserver</command>,
<command>v5passwd</command>,
<command>v5passwdd</command>,
<filename class="libraryfile">libcom_err</filename>,
<filename class="libraryfile">libdes425</filename>,
<filename class="libraryfile">libgssapi</filename>,
<filename class="libraryfile">libgssrpc</filename>,
<filename class="libraryfile">lib5crypto</filename>,
<filename class="libraryfile">libkadm5clnt</filename>,
<filename class="libraryfile">libkadm5srv</filename>,
<filename class="libraryfile">libkdb5</filename>,
<filename class="libraryfile">libkrb4</filename> and
<filename class="libraryfile">libkrb5</filename>.
</para>
<segmentedlist>
<segtitle>Installed Programs</segtitle>
<segtitle>Installed Libraries</segtitle>
<segtitle>Installed Directories</segtitle>
</sect2>
<seglistitem>
<seg>compile-et, ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
kadmin.local, kadmind, kadmind4, kdb5_util, kdestroy, kinit, klist,
klogind, kpasswd, kprop, kpropd, krb5-send-pr, krb5-config, krb524d,
krb524init, krb5kdc, kshd, ksu, ktutil, kvno, login.krb5, rcp, rlogin,
rsh, rshd, rxtelnet, rxterm, sclient, sim_client, sim_server, sserver,
telnet, telnetd, uuclient, uuserver, v5passwd, v5passwdd</seg>
<seg>libcom_err.[so,a], libdes425.[so,a], libgssapi.[so,a], libgssrpc.[so,a],
libkadm5clnt.[so,a], libkadm5srv.[so,a], libkdb5.[so,a], libkrb5.[so,a], libkrb4.[so,a]</seg>
<seg>/usr/include/kerberosIV and /var/lib/krb5kdc</seg>
</seglistitem>
</segmentedlist>
<sect2><title>Description</title>
<variablelist>
<bridgehead renderas="sect3">Short Descriptions</bridgehead>
<?dbfo list-presentation="list"?>
<sect3><title>compile_et</title>
<para>
<command>compile_et</command> converts the table listing
error-code names into a <application>C</application> source file.
</para>
</sect3>
<varlistentry id="compile_et">
<term><command>compile_et</command></term>
<listitem><para>converts the table listing
error-code names into a <application>C</application> source file..</para>
<indexterm zone="mitkrb compile_et">
<primary sortas="b-compile_et">compile_et</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>k5srvutil</title>
<para>
<command>k5srvutil</command> is a host keytable manipulation utility.
</para>
</sect3>
<varlistentry id="k5srvutil">
<term><command>k5srvutil</command></term>
<listitem><para>is a host keytable manipulation utility.</para>
<indexterm zone="mitkrb k5srvutil">
<primary sortas="b-k5srvutil">k5srvutil</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kadmin</title>
<para>
<command>kadmin</command> is an utility used to make modifications
to the Kerberos database.
</para>
</sect3>
<varlistentry id="kadmin">
<term><command>kadmin</command></term>
<listitem><para>is an utility used to make modifications
to the Kerberos database.</para>
<indexterm zone="mitkrb kadmin">
<primary sortas="b-kadmin">kadmin</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kadmind</title>
<para>
<command>kadmind</command> is a server for administrative access
to a Kerberos database.
</para>
</sect3>
<varlistentry id="kadmind">
<term><command>kadmind</command></term>
<listitem><para>is a server for administrative access
to a Kerberos database.</para>
<indexterm zone="mitkrb kadmind">
<primary sortas="b-kadmind">kadmind</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kinit</title>
<para>
<command>kinit</command> is used to authenticate to the Kerberos server as
a principal and acquire a ticket granting ticket that can later be used to
obtain tickets for other services.
</para>
</sect3>
<varlistentry id="kinit">
<term><command>kinit</command></term>
<listitem><para>is used to authenticate to the Kerberos server as
a principal and acquire a ticket granting ticket that can later be used
to obtain tickets for other services.</para>
<indexterm zone="mitkrb kinit">
<primary sortas="b-kinit">kinit</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>krb5kdc</title>
<para>
<command>krb5kdc</command> is a Kerberos 5 server.
</para>
</sect3>
<varlistentry id="krb5kdc">
<term><command>krb5kdc</command></term>
<listitem><para>is a Kerberos 5 server.</para>
<indexterm zone="mitkrb krb5kdc">
<primary sortas="b-krb5kdc">krb5kdc</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kdestroy</title>
<para>
<command>kdestroy</command> removes the current set of tickets.
</para>
</sect3>
<varlistentry id="kdestroy">
<term><command>kdestroy</command></term>
<listitem><para>removes the current set of tickets.</para>
<indexterm zone="mitkrb kdestroy">
<primary sortas="b-kdestroy">kdestroy</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kdb5_util</title>
<para>
<command>kdb5_util</command> is the <acronym>KDC</acronym> database utility.
</para>
</sect3>
<varlistentry id="kdb5util">
<term><command>kdb5util</command></term>
<listitem><para>is the <acronym>KDC</acronym> database utility.</para>
<indexterm zone="mitkrb kdb5util">
<primary sortas="b-kdb5util">kdb5util</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>klist</title>
<para>
<command>klist</command> reads and displays the current tickets in
the credential cache.
</para>
</sect3>
<varlistentry id="klist">
<term><command>klist</command></term>
<listitem><para>reads and displays the current tickets in
the credential cache.</para>
<indexterm zone="mitkrb klist">
<primary sortas="b-klist">klist</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>klogind</title>
<para>
<command>klogind</command> is the server that responds to
<command>rlogin</command> requests.
</para>
</sect3>
<varlistentry id="klogind">
<term><command>klogind</command></term>
<listitem><para>is the server that responds to
<command>rlogin</command> requests.</para>
<indexterm zone="mitkrb klogind">
<primary sortas="b-klogind">klogind</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kpasswd</title>
<para>
<command>kpasswd</command> is a program for changing Kerberos 5 passwords.
</para>
</sect3>
<varlistentry id="kpasswd">
<term><command>kpasswd</command></term>
<listitem><para>is a program for changing Kerberos 5 passwords.</para>
<indexterm zone="mitkrb kpasswd">
<primary sortas="b-kpasswd">kpasswd</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kprop</title>
<para>
<command>kprop</command> takes a principal database in a specified
<varlistentry id="kprop">
<term><command>kprop</command></term>
<listitem><para>takes a principal database in a specified
format and converts it into a stream of database
records.
</para>
</sect3>
records.</para>
<indexterm zone="mitkrb kprop">
<primary sortas="b-kprop">kprop</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kpropd</title>
<para>
<command>kpropd</command> receives a database sent by
<command>hprop</command> and writes it as a local database.
</para>
</sect3>
<varlistentry id="kpropd">
<term><command>kpropd</command></term>
<listitem><para>receives a database sent by
<command>kprop</command> and writes it as a local database.</para>
<indexterm zone="mitkrb kpropd">
<primary sortas="b-kpropd">kpropd</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>krb5-config</title>
<para>
<command>krb5-config</command> gives information on how to link
programs against libraries.
</para>
</sect3>
<varlistentry id="krb5-config-1">
<term><command>krb5-config</command></term>
<listitem><para>gives information on how to link
programs against libraries.</para>
<indexterm zone="mitkrb krb5-config-1">
<primary sortas="b-krb5-config-1">krb5-config</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>ksu</title>
<para>
<command>ksu</command> is the super user program using Kerberos protocol.
Requires a properly configured
<filename class="directory">/etc/shells</filename> and
<varlistentry id="ksu">
<term><command>ksu</command></term>
<listitem><para>is the super user program using Kerberos protocol.
Requires a properly configured
<filename class="directory">/etc/shells</filename> and
<filename>~/.k5login</filename> containing principals authorized to
become super users.
</para>
</sect3>
become super users.</para>
<indexterm zone="mitkrb ksu">
<primary sortas="b-ksu">ksu</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>ktutil</title>
<para>
<command>ktutil</command> is a program for managing Kerberos keytabs.
</para>
</sect3>
<varlistentry id="ktutil">
<term><command>ktutil</command></term>
<listitem><para>is a program for managing Kerberos keytabs.</para>
<indexterm zone="mitkrb ktutil">
<primary sortas="b-ktutil">ktutil</primary>
</indexterm></listitem>
</varlistentry>
<sect3><title>kvno</title>
<para>
<command>kvno</command> prints keyversion numbers of Kerberos principals.
</para>
</sect3>
<varlistentry id="kvno">
<term><command>kvno</command></term>
<listitem><para>prints keyversion numbers of Kerberos principals.</para>
<indexterm zone="mitkrb kvno">
<primary sortas="b-kvno">kvno</primary>
</indexterm></listitem>
</varlistentry>
</variablelist>
</sect2>