/etc/cfengine/debian-edu/cf.krb5client is in debian-edu-config 1.702.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 | #
# Configure KRB5 client
#
editfiles:
debian.installation.!standalone::
{ /etc/krb5.conf
BeginGroupIfNoLineMatching ' dns_lookup_kdc.*=.*true'
HashCommentLinesMatching '.*dns_lookup_kdc.*=.*'
LocateLineMatching '\[libdefaults\]'
InsertLine ' dns_lookup_kdc = true'
EndGroup
ResetSearch "1"
BeginGroupIfNoLineMatching ' dns_lookup_realm.*=.*true'
HashCommentLinesMatching '.*dns_lookup_realm.*=.*'
HashCommentLinesMatching '.*default_realm.*=.*'
LocateLineMatching '\[libdefaults\]'
InsertLine ' dns_lookup_realm = true'
EndGroup
}
shellcommands:
debian.installation.!standalone.!roaming::
# Move away Squeeze krb5 pam config to allow us to provide a
# replacement to fix #656309.
# FIXME See if this is still needed in Wheezy.
"/usr/sbin/dpkg-divert --package debian-edu-config --rename --divert /usr/share/debian-edu-config/pam-config-krb5-orig --add /usr/share/pam-configs/krb5"
debian.installation.!standalone.!roaming.secondpass::
# Activate changes to pam-configs in /etc/pam.d/
"/usr/sbin/pam-auth-update --package"
links:
debian.installation.!standalone.!roaming::
/usr/share/pam-configs/edu-krb5 ->! /usr/share/debian-edu-config/pam-config-krb5
|