Browse Source

remove kerberosIV configuration files

ok hin@ deraadt@ pb@
OPENBSD_3_4
david 21 years ago
parent
commit
bf4d53e8c8
10 changed files with 5 additions and 125 deletions
  1. +1
    -12
      src/etc/Makefile
  2. +0
    -35
      src/etc/kerberosIV/README
  3. +0
    -5
      src/etc/kerberosIV/krb.conf
  4. +0
    -10
      src/etc/kerberosIV/krb.equiv
  5. +0
    -25
      src/etc/kerberosIV/krb.extra
  6. +0
    -13
      src/etc/kerberosIV/krb.realms
  7. +1
    -6
      src/etc/mtree/4.4BSD.dist
  8. +1
    -8
      src/etc/mtree/4.4BSD.root
  9. +1
    -8
      src/etc/mtree/4.4BSD.usr
  10. +1
    -3
      src/etc/mtree/special

+ 1
- 12
src/etc/Makefile View File

@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.182 2003/03/30 07:43:02 deraadt Exp $
# $OpenBSD: Makefile,v 1.183 2003/06/27 21:26:19 david Exp $
TZDIR= /usr/share/zoneinfo
LOCALTIME= Canada/Mountain
@ -103,17 +103,6 @@ distribution-etc-root-var: distrib-dirs
${DESTDIR}/etc/skel/.profile; \
${INSTALL} -c -o root -g wheel -m 600 dot.rhosts \
${DESTDIR}/etc/skel/.rhosts
cd kerberosIV; \
${INSTALL} -c -o root -g wheel -m 644 README \
${DESTDIR}/etc/kerberosIV; \
${INSTALL} -c -o root -g wheel -m 644 krb.conf \
${DESTDIR}/etc/kerberosIV; \
${INSTALL} -c -o root -g wheel -m 644 krb.realms \
${DESTDIR}/etc/kerberosIV; \
${INSTALL} -c -o root -g wheel -m 644 krb.extra \
${DESTDIR}/etc/kerberosIV; \
${INSTALL} -c -o root -g wheel -m 644 krb.equiv \
${DESTDIR}/etc/kerberosIV
cd kerberosV; \
${INSTALL} -c -o root -g wheel -m 644 README \
${DESTDIR}/etc/kerberosV; \


+ 0
- 35
src/etc/kerberosIV/README View File

@ -1,35 +0,0 @@
# from @(#)README 8.1 (Berkeley) 6/9/93
# $OpenBSD: README,v 1.6 2002/06/09 06:15:15 todd Exp $
Notes about the contents of the /etc/kerberosIV directory:
(Please check the kth-krb infopage for more information about KerberosIV)
The file master_key contains a copy of the master key under which the
entire KerberosIV database is encrypted. Disclosing this key would be bad
news. The reason it is stored in the filesystem is because the following
programs need to inspect or modify the kereros database, and so the key
must be available for them, (or else it would have to be typed in by
hand):
- kerberos (the server itself)
- kpasswdd (for changing passwords)
- kadmind (database administration server)
The srvtab file contains the encryption keys for each service on the local
host. Any host offering network services would have a key here, although
many such files can be used.
The principal.* files comprise the KerberosIV database itself, and contain
keys for all principles, and should not be world-readable.
The krb.conf file contains the configuration for this machine:
1) which realm I'm in
if this line begins with '#', KerberosIV is disabled system-wide.
2) which servers I should talk to for _this_ realm
3) which servers I should talk to for the following realms.
The krb.realms file contains the name of KerberosIV servers for
various (sub)domains.
KerberosIV log information it placed in /var/log/kerberos.log
(see /etc/rc to change it)

+ 0
- 5
src/etc/kerberosIV/krb.conf View File

@ -1,5 +0,0 @@
#MY.DOMAIN
#MY.DOMAIN me.my.domain admin server
SIGMASOFT.COM gandalf.sigmasoft.com admin server
TOAD.COM toad.com admin server
TETHERLESS.COM gandalf.pa.tetherless.com admin server

+ 0
- 10
src/etc/kerberosIV/krb.equiv View File

@ -1,10 +0,0 @@
# $OpenBSD: krb.equiv,v 1.4 2002/06/09 06:15:15 todd Exp $
# krb.equiv contains a list of IP addresses that is to be considered being
# the same host for KerberosIV purposes.
# Please refer to krb.equiv(5) for more information.
#
# Examples
# A machine with two interfaces.
#130.237.232.113 130.237.221.42 # emma emma-ether
# A machine with *many* interfaces
#193.10.156.0/24 193.10.157.0/24 # syk-* syk-*-hps

+ 0
- 25
src/etc/kerberosIV/krb.extra View File

@ -1,25 +0,0 @@
# $OpenBSD: krb.extra,v 1.3 2003/01/06 11:33:25 miod Exp $
#
# This file holds some configuration options that are not normally used.
# Please see krb.extra(5) for more information about this file - only
# the most commonly used variables are listed here.
#
# You can specify a number of VARIABLE = VALUE pairs in this file. Empty lines
# and lines beginning with a hash (#) are ignored.
# kdc_timeout specifies how many seconds to wait for a respons from the KDC.
# Default is 4 seconds.
#kdc_timeout=4
# kdc_timesync makes KerberosIV store the time difference between the client
# and the KDC. This makes it possible to use KerberosIV if for some reason you
# cannot synchronize the clocks. Default is no.
#kdc_timesync=yes
# To get KerberosIV tickets via a http proxy, use krb4_proxy to specify what
# proxy to user. Default is to not use a proxy.
#krb4_proxy=proxy
# If your network uses NAT (Network Address Translation), this enables some
# code that will make your life easier. Default is no.
#nat_in_use=yes

+ 0
- 13
src/etc/kerberosIV/krb.realms View File

@ -1,13 +0,0 @@
my.domain MY.DOMAIN
.my.domain MY.DOMAIN
sigmasoft.com SIGMASOFT.COM
.sigmasoft.com SIGMASOFT.COM
toad.com TOAD.COM
.toad.com TOAD.COM
tetherless.com TETHERLESS.COM
.tetherless.com TETHERLESS.COM
.pa.tetherless.com TETHERLESS.COM
tetherless.net TETHERLESS.COM
.tetherless.net TETHERLESS.COM
.pa.tetherless.net TETHERLESS.COM
.ba.tetherless.net TETHERLESS.COM

+ 1
- 6
src/etc/mtree/4.4BSD.dist View File

@ -1,4 +1,4 @@
# $OpenBSD: 4.4BSD.dist,v 1.153 2003/05/17 05:27:43 mho Exp $
# $OpenBSD: 4.4BSD.dist,v 1.154 2003/06/27 21:26:20 david Exp $
/set type=dir uname=root gname=wheel mode=0755
# .
@ -74,11 +74,6 @@ private uname=root mode=0700
# ./etc/isakmpd
..
# ./etc/kerberosIV
kerberosIV
# ./etc/kerberosIV
..
# ./etc/kerberosV
kerberosV
# ./etc/kerberosV


+ 1
- 8
src/etc/mtree/4.4BSD.root View File

@ -1,4 +1,4 @@
# $OpenBSD: 4.4BSD.root,v 1.9 2002/06/09 06:15:15 todd Exp $
# $OpenBSD: 4.4BSD.root,v 1.10 2003/06/27 21:26:20 david Exp $
# $NetBSD: 4.4BSD.root,v 1.2 1996/05/12 23:30:32 thorpej Exp $
#
# user: bostic
@ -76,13 +76,6 @@ disklabels type=dir mode=0775
..
# ./etc/kerberosIV
/set type=file gname=wheel uname=root mode=0444
kerberosIV type=dir mode=0755
# ./etc/kerberosIV
..
# ./etc/mtree
/set type=file gname=wheel uname=root mode=0600
mtree type=dir mode=0755


+ 1
- 8
src/etc/mtree/4.4BSD.usr View File

@ -1,4 +1,4 @@
# $OpenBSD: 4.4BSD.usr,v 1.20 2003/03/17 07:38:13 deraadt Exp $
# $OpenBSD: 4.4BSD.usr,v 1.21 2003/06/27 21:26:20 david Exp $
# $NetBSD: 4.4BSD.usr,v 1.3 1996/05/12 23:30:37 thorpej Exp $
#
# user: bostic
@ -274,13 +274,6 @@ std type=dir mode=0755
..
# ./include/kerberosIV
/set type=file gname=bin uname=root mode=0444
kerberosIV type=dir uname=root gname=wheel mode=0755
# ./include/kerberosIV
..
# ./include/pascal
/set type=file gname=bin uname=root mode=0444
pascal type=dir uname=root gname=wheel mode=0755


+ 1
- 3
src/etc/mtree/special View File

@ -1,4 +1,4 @@
# $OpenBSD: special,v 1.52 2003/03/30 14:58:18 jmc Exp $
# $OpenBSD: special,v 1.53 2003/06/27 21:26:20 david Exp $
# $NetBSD: special,v 1.4 1996/05/08 21:30:18 pk Exp $
# @(#)special 8.2 (Berkeley) 1/23/94
#
@ -32,8 +32,6 @@ group type=file mode=0644 uname=root gname=wheel
hosts type=file mode=0644 uname=root gname=wheel
hosts.equiv type=file mode=0600 uname=root gname=wheel optional
inetd.conf type=file mode=0644 uname=root gname=wheel
kerberosIV type=dir mode=0755 uname=root gname=wheel optional ignore
.. #kerberosIV
kerberosV type=dir mode=0755 uname=root gname=wheel optional ignore
.. #kerberosV
host.random type=file mode=0600 uname=root gname=wheel optional


Loading…
Cancel
Save