diff options
author | markm <markm@FreeBSD.org> | 1997-09-04 06:04:33 +0000 |
---|---|---|
committer | markm <markm@FreeBSD.org> | 1997-09-04 06:04:33 +0000 |
commit | a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8 (patch) | |
tree | 0b84977f19022a965f8c6145f067f951173f6290 /crypto/kerberosIV/etc/README | |
download | FreeBSD-src-a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8.zip FreeBSD-src-a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8.tar.gz |
Initial import of KTH eBones. This has been cleaned up to only include
the "core" Kerberos functionality. The rest of the userland will get their
own changes later.
Diffstat (limited to 'crypto/kerberosIV/etc/README')
-rw-r--r-- | crypto/kerberosIV/etc/README | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/crypto/kerberosIV/etc/README b/crypto/kerberosIV/etc/README new file mode 100644 index 0000000..68865ec --- /dev/null +++ b/crypto/kerberosIV/etc/README @@ -0,0 +1,41 @@ + + How to update your files in the /etc directory! + +/etc/services (all machines) + + The contents of services.append can probably just be appended to +your local file. If you use NIS (YP) you need to do this on the NIS +master. Delete and duplicate definitions to prevent inconsistencies. + +/etc/krb.conf (all machines) + + Create a krb.conf file by substituting MY.REALM.NAME with your +domain name. If you create a domain name alias (CNAME) kerberos.domain +pointing to your master server, unconfigured clients will have a +chance to find your realm. + + It is no longer necessary to put each and every realm in +krb.{conf,realms}. If the domain name matches your realm name and you +have a CNAME kerberos.REALMNAME pointing at your kerberos server other +sites will find your realm even if it is not listed in krb.conf. +*** Please add this CNAME to your local DNS *** + +/etc/krb.realms (all machines) + + Substitue MY.REALM.NAME in krb.realms with your domain name. + Not strictly necessary when domain and realm names match. + +/etc/inetd.conf (all machines supporting incoming telnet, rsh etc.) + + Comment out the lines starting with shell, login and telnet and +append inetd.conf.changes. Be carefull to check that there are no +additional old entries of kshell, ekshell, klogin and eklogin left. + + The -v option to rshd and rlogin turns off that service and echo +an informational message to the user. + +/etc/srvtab + + With 'ksrvutil get' you can add entries to the Kerberos database and +put the service keys into your srvtab file. + |