jimzah/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src.git synced 2024-11-29 17:32:43 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
84a6914bd8
freebsd-src/crypto/kerberosIV/etc
History
Mark Murray 03656ac1b0 Initial import of KTH eBones. This has been cleaned up to only include 
the "core" Kerberos functionality. The rest of the userland will get their
own changes later.
1997-09-04 06:04:33 +00:00
..
default.login Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
fbtab Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
hosts.equiv Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
inetd.conf.changes Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
krb.conf Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
krb.equiv Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
krb.realms Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
login.access Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
README Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00
services.append Initial import of KTH eBones. This has been cleaned up to only include 1997-09-04 06:04:33 +00:00

README 

	How to update your files in the /etc directory!

/etc/services (all machines)

  The contents of services.append can probably just be appended to
your local file. If you use NIS (YP) you need to do this on the NIS
master. Delete and duplicate definitions to prevent inconsistencies.

/etc/krb.conf (all machines)

  Create a krb.conf file by substituting MY.REALM.NAME with your
domain name. If you create a domain name alias (CNAME) kerberos.domain
pointing to your master server, unconfigured clients will have a
chance to find your realm.

  It is no longer necessary to put each and every realm in
krb.{conf,realms}. If the domain name matches your realm name and you
have a CNAME kerberos.REALMNAME pointing at your kerberos server other
sites will find your realm even if it is not listed in krb.conf.  
*** Please add this CNAME to your local DNS ***

/etc/krb.realms (all machines)

  Substitue MY.REALM.NAME in krb.realms with your domain name.
  Not strictly necessary when domain and realm names match.

/etc/inetd.conf (all machines supporting incoming telnet, rsh etc.)

  Comment out the lines starting with shell, login and telnet and
append inetd.conf.changes. Be carefull to check that there are no
additional old entries of kshell, ekshell, klogin and eklogin left.

  The -v option to rshd and rlogin turns off that service and echo
an informational message to the user.

/etc/srvtab

  With 'ksrvutil get' you can add entries to the Kerberos database and
put the service keys into your srvtab file.