diff options
| -rw-r--r-- | remote/modules/pam/data/etc/krb5.conf | 28 | ||||
| -rw-r--r-- | remote/modules/pam/pam.build | 10 | ||||
| -rw-r--r-- | remote/modules/pam/pam.conf | 2 |
3 files changed, 39 insertions, 1 deletions
diff --git a/remote/modules/pam/data/etc/krb5.conf b/remote/modules/pam/data/etc/krb5.conf new file mode 100644 index 00000000..6fd49243 --- /dev/null +++ b/remote/modules/pam/data/etc/krb5.conf @@ -0,0 +1,28 @@ +# file copied from configuration package (rootfs/etc/krb5.conf) +######################################################################### +[libdefaults] + noaddresses = false + clockskew = 300 + default_realm = PUBLIC.ADS.UNI-FREIBURG.DE + forwardable = true + minimum_uid = 1000 + proxiable = false + renew_lifetime = 30d + retain_after_close = false + ticket_lifetime = 3d + use_shmem = sshd + allow_weak_crypto=true +######################################################################### +[realms] + PUBLIC.ADS.UNI-FREIBURG.DE = { + kdc = kerberos.uni-freiburg.de + default_domain = uni-freiburg.de + admin_server = kerberos.uni-freiburg.de + } +######################################################################### +[domain_realm] + uni-freiburg.de = PUBLIC.ADS.UNI-FREIBURG.DE + .uni-freiburg.de = PUBLIC.ADS.UNI-FREIBURG.DE +########################################################################## +[appdefaults] +######################################################################### diff --git a/remote/modules/pam/pam.build b/remote/modules/pam/pam.build index 292171a2..1fc65091 100644 --- a/remote/modules/pam/pam.build +++ b/remote/modules/pam/pam.build @@ -5,6 +5,7 @@ fetch_source() { build() { mkdir -p "$MODULE_BUILD_DIR/opt/openslx/bin" gcc -o "$MODULE_BUILD_DIR/opt/openslx/bin/sslconnect" "$MODULE_DIR/sslconnect.c" -lssl -lcrypto -O3 || perror "Could not compile sslconnect.c" + list_packet_files > /tmp/jonathan tarcopy "$(list_packet_files | sort -u)" "${MODULE_BUILD_DIR}" } @@ -12,5 +13,12 @@ post_copy() { if [ ! -d "${TARGET_BUILD_DIR}/run/rpc_pipefs" ]; then mkdir -p "${TARGET_BUILD_DIR}/run/rpc_pipefs" || pwarning "Could not mkdir ${TARGET_BUILD_DIR}/run/rpc_pipefs" fi - + + # find libnfsidmap run-time library directory + SEARCH=$(dirname "$(list_packet_files | sort -u | grep "/libsnfsidmap/"|head -1)") + if [ -d "${SEARCH}" ]; then + tarcopy "${SEARCH}" "${TARGET_BUILD_DIR}" || pinfo "Something went wrong copying $SEARCH" + fi + + } diff --git a/remote/modules/pam/pam.conf b/remote/modules/pam/pam.conf index 38600f01..f932749c 100644 --- a/remote/modules/pam/pam.conf +++ b/remote/modules/pam/pam.conf @@ -7,6 +7,7 @@ REQUIRED_INSTALLED_PACKAGES=" libpam-krb5 libssl-dev ldap-utils + libnfsidmap2 " REQUIRED_CONTENT_PACKAGES=" libpam0g @@ -21,6 +22,7 @@ REQUIRED_CONTENT_PACKAGES=" krb5-config libpam-krb5 libpam-mount + libnfsidmap2 " REQUIRED_BINARIES=" rpc.gssd |