From 48e0da0a1006ad9babdf9d3356a5c68069bb8244 Mon Sep 17 00:00:00 2001 From: Jonathan Bauer Date: Tue, 18 Jun 2013 13:11:12 +0200 Subject: [pam] add config files for rpc services --- remote/modules/pam/data/etc/gssapi_mech.conf | 21 +++++++++++++++++++++ remote/modules/pam/data/etc/idmapd.conf | 12 ++++++++++++ .../system/getty.target.wants/rpc-sercices.service | 1 + .../data/etc/systemd/system/rpc-sercices.service | 8 ++++++++ 4 files changed, 42 insertions(+) create mode 100644 remote/modules/pam/data/etc/gssapi_mech.conf create mode 100644 remote/modules/pam/data/etc/idmapd.conf create mode 120000 remote/modules/pam/data/etc/systemd/system/getty.target.wants/rpc-sercices.service create mode 100644 remote/modules/pam/data/etc/systemd/system/rpc-sercices.service (limited to 'remote/modules') diff --git a/remote/modules/pam/data/etc/gssapi_mech.conf b/remote/modules/pam/data/etc/gssapi_mech.conf new file mode 100644 index 00000000..ac41f5fd --- /dev/null +++ b/remote/modules/pam/data/etc/gssapi_mech.conf @@ -0,0 +1,21 @@ +# Example /etc/gssapi_mech.conf file +# +# GSSAPI Mechanism Definitions +# +# This configuration file determines which GSS-API mechanisms +# the gssd code should use +# +# NOTE: +# The initiaiization function "mechglue_internal_krb5_init" +# is used for the MIT krb5 gssapi mechanism. This special +# function name indicates that an internal function should +# be used to determine the entry points for the MIT gssapi +# mechanism funtions. +# +# library initialization function +# ================================ ========================== +# The MIT K5 gssapi library, use special function for initialization. +libgssapi_krb5.so.2 mechglue_internal_krb5_init +# +# The SPKM3 gssapi library function. Use the function spkm3_gss_initialize. +# /usr/local/gss_mechs/spkm/spkm3/libgssapi_spkm3.so spkm3_gss_initialize diff --git a/remote/modules/pam/data/etc/idmapd.conf b/remote/modules/pam/data/etc/idmapd.conf new file mode 100644 index 00000000..61cfe2d9 --- /dev/null +++ b/remote/modules/pam/data/etc/idmapd.conf @@ -0,0 +1,12 @@ +[General] + +Verbosity = 0 +Pipefs-Directory = /run/rpc_pipefs +# set your own domain here, if id differs from FQDN minus hostname +Domain = uni-freiburg.de + # localdomain + +[Mapping] + +Nobody-User = nobody +Nobody-Group = nogroup diff --git a/remote/modules/pam/data/etc/systemd/system/getty.target.wants/rpc-sercices.service b/remote/modules/pam/data/etc/systemd/system/getty.target.wants/rpc-sercices.service new file mode 120000 index 00000000..f68f14b9 --- /dev/null +++ b/remote/modules/pam/data/etc/systemd/system/getty.target.wants/rpc-sercices.service @@ -0,0 +1 @@ +../rpc-sercices.service \ No newline at end of file diff --git a/remote/modules/pam/data/etc/systemd/system/rpc-sercices.service b/remote/modules/pam/data/etc/systemd/system/rpc-sercices.service new file mode 100644 index 00000000..db6b115a --- /dev/null +++ b/remote/modules/pam/data/etc/systemd/system/rpc-sercices.service @@ -0,0 +1,8 @@ +[Unit] +Description=Start RPC services +Requires=activate-nss-ldap.service +After=activate-nss-ldap.service + +[Service] +ExecStart=/usr/sbin/rpc.gssd +ExecStart=/usr/sbin/rpc.idmapd -- cgit v1.2.3-55-g7522