nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

more config files and updates.

This commit is contained in:
Ryan Haggerty 2005-11-14 20:07:26 +00:00
parent 0d5d74e02b
commit a8b62e799c
3 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
testing/kerberos/README
View File

@ -3,11 +3,9 @@ install server
and if the libs are not installed and if the libs are not installed
yum install krb5-libs yum install krb5-libs
set a hostname
hostname noplace.org
copy krb5.conf to /etc/ copy krb5.conf to /etc/
copy kdc.conf to /var/kerberos/krb5kdc copy kdc.conf to /var/kerberos/krb5kdc
copy kadm5.acl to /var/kerberos/krb5kdc/
init the database and admin principals. init the database and admin principals.
kdb5_util create -s kdb5_util create -s
@ -16,8 +14,10 @@ add an admin principal
while running kadmin.local enter while running kadmin.local enter
addprinc master/admin addprinc master/admin
turn off iptables
start the service with init scripts start the service with init scripts
/etc/rc.d/init.d/krb5kdc start /etc/rc.d/init.d/krb5kdc start
/etc/rc.d/init.d/kadmin start /etc/rc.d/init.d/kadmin start
test it out test it out
kinit master/admin kinit master/admin
kadmin

9
testing/kerberos/denial_notes Normal file
View File

@ -0,0 +1,9 @@
kerberos seems to have basic functionality. some denials occur but do not seem to effect what
was tested so far
/etc/init.d/krb5kdc start
allow krb5kdc_t krb5_conf_t:file write;
allow krb5kdc_t krb5kdc_conf_t:file write;
allow krb5kdc_t proc_net_t:dir read;
/etc/init.d/kadmin start
allow kadmind_t krb5_conf_t:file write;
allow kadmind_t krb5kdc_conf_t:file write;

1
testing/kerberos/kadm5.acl Normal file
View File

@ -0,0 +1 @@
*/admin@NOPLACE.ORG *