From e8eb87ccd604102f329a6bcc6070fa2e7be93c71 Mon Sep 17 00:00:00 2001 From: Larry Lawrence Date: Thu, 10 Feb 2005 20:19:10 +0000 Subject: [PATCH] expanded MIT krb5 descriptions git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3428 af4574ff-66df-0310-9fd7-8a98e5e911e0 --- introduction/welcome/changelog.xml | 2 + postlfs/security/linux_pam.xml | 9 +- postlfs/security/mitkrb.xml | 182 +++++++++++++++++++++++++---- 3 files changed, 166 insertions(+), 27 deletions(-) diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml index 17e24b5ddf..44260678d6 100644 --- a/introduction/welcome/changelog.xml +++ b/introduction/welcome/changelog.xml @@ -21,6 +21,8 @@ who wrote what. &version; – &releasedate; +February 10th, 2005 [larry]: Added more descriptions to +MIT Kerberos and added db to PAM's dependancies. February 10th, 2005 [randy]: Updated to WvStreams-4.0.1; Fixed broken download URLs in RP-PPPoE instructions diff --git a/postlfs/security/linux_pam.xml b/postlfs/security/linux_pam.xml index 3e71cf53f3..1a830d047c 100644 --- a/postlfs/security/linux_pam.xml +++ b/postlfs/security/linux_pam.xml @@ -59,6 +59,7 @@ dependencies Optional sgmltools-lite +and (for pam_userdb module) @@ -175,7 +176,7 @@ package. Installed Directories unix_chkpwd and pam_tally -libpam.so, libpamc.so and libpam_misc.so +libpam.[so,a], libpamc.[so,a] and libpam_misc.[so,a] /etc/pam.d and /lib/security @@ -194,11 +195,11 @@ in read protected databases. -libpam.so - provide the interfaces between applications and the +libpam.[so,a] +provide the interfaces between applications and the PAM modules. -libpam.so +libpam.[so,a] diff --git a/postlfs/security/mitkrb.xml b/postlfs/security/mitkrb.xml index eaffb4ce3c..8b956e9fe8 100644 --- a/postlfs/security/mitkrb.xml +++ b/postlfs/security/mitkrb.xml @@ -96,7 +96,7 @@ following commands: cd src && ./configure --prefix=/usr --sysconfdir=/etc \ --localstatedir=/var/lib --enable-dns \ - --enable-shared --mandir=/usr/share/man && + --enable-static --mandir=/usr/share/man && make @@ -130,6 +130,11 @@ ldconfig be resolved using the DNS server. + +--enable-static: This switch builds static +libraries in addition to the shared libraries. + + mv /bin/login /bin/login.shadow cp /usr/sbin/login.krb5 /bin/login @@ -388,7 +393,7 @@ for krb-&mitkrb-version; on which the above instructions are based. kadmin.local, kadmind, kadmind4, kdb5_util, kdestroy, kinit, klist, klogind, kpasswd, kprop, kpropd, krb5-send-pr, krb5-config, krb524d, krb524init, krb5kdc, kshd, ksu, ktutil, kvno, login.krb5, rcp, rlogin, -rsh, rshd, rxtelnet, rxterm, sclient, sim_client, sim_server, sserver, +rsh, sclient, sim_client, sim_server, sserver, telnet, telnetd, uuclient, uuserver, v5passwd, v5passwdd libcom_err.[so,a], libdes425.[so,a], libgssapi.[so,a], libgssrpc.[so,a], libkadm5clnt.[so,a], libkadm5srv.[so,a], libkdb5.[so,a], libkrb5.[so,a], @@ -410,6 +415,22 @@ error-code names into a C source file.. + +ftp +is a kerberized FTP client. + +ftp + + + + +ftpd +is a kerberized FTP daemon. + +ftpd + + + k5srvutil is a host keytable manipulation utility. @@ -436,21 +457,11 @@ to a Kerberos database. - -kinit -is used to authenticate to the Kerberos server as -a principal and acquire a ticket granting ticket that can later be used -to obtain tickets for other services. - -kinit - - - - -krb5kdc -is a Kerberos 5 server. - -krb5kdc + +kdb5_util +is the KDC database utility. + +kdb5_util @@ -462,11 +473,13 @@ to obtain tickets for other services. - -kdb5util -is the KDC database utility. - -kdb5util + +kinit +is used to authenticate to the Kerberos server as +a principal and acquire a ticket granting ticket that can later be used +to obtain tickets for other services. + +kinit @@ -519,11 +532,28 @@ records. krb5-config gives information on how to link programs against libraries. - + krb5-config + +krb5kdc +is a Kerberos 5 server. + +krb5kdc + + + + +kshd +is the server that responds to +rsh requests. + +kshd + + + ksu is the super user program using Kerberos protocol. @@ -551,6 +581,112 @@ become super users. kvno + + +login.krb5 +is a kerberized login program. + +login.krb5 + + + + +rcp +is a kerberized rcp client program. + +rcp + + + + +rlogin +is a kerberized rlogin client program. + +rlogin + + + + +rsh +is a kerberized rsh client program. + +rsh + + + + +telnet +is a kerberized telnet client program. + +telnet + + + + +telnetd +is a kerberized telnet server. + +telnetd + + + + +libcom_err.[so,a] +implements the Kerberos library error code. + +libcom_err.[so,a] + + + + +libgssapi.[so,a] +contain the Generic Security Service Application +Programming +Interface (GSSAPI) functions which provides security +services to callers in a generic fashion, supportable with a range of +underlying mechanisms and technologies and hence allowing source-level +portability of applications to different environments. + +libgssapi.[so,a] + + + + +libkadm5clnt.[so,a] +contains the administrative authentication and password +checking functions required by Kerberos 5 client-side programs. + +libkadm5clnt.[so,a] + + + + +libkadm5srv.[so,a] +contain the administrative authentication and password +checking functions required by Kerberos 5 servers. + +libkadm5srv.[so,a] + + + + +libkdb5.[so,a] +is a Kerberos 5 +authentication/authorization database access library. + +libkdb5.[so,a] + + + + +libkrb5.[so,a] +is an all-purpose Kerberos 5 library. + +libkrb5.[so,a] + + +