Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove some more kerberosIV remnants.

Browse Source
This commit is contained in:
wiz 2006-03-23 20:02:56 +00:00
parent 6cda6a5c42
commit eaefa28b52
4 changed files with 1 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
etc/kerberosIV/README
View File

@ -1,36 +0,0 @@
# $NetBSD: README,v 1.4 1999/05/08 01:09:09 hubertf Exp $
# @(#)README 8.1 (Berkeley) 6/9/93
Notes about the contents of the /etc/kerberosIV directory:
The file master_key contains a copy of the master key under which the
entire Kerberos database is encrypted. Disclosing this key would be bad
news. The reason it is stored in the filesystem is because the following
programs need to inspect or modify the kerberos database, and so the key
must be available for them, (or else it would have to be typed in by
hand):
- kerberos (the server itself)
- registerd (for new user registration)
- kpasswdd (for changing passwords)
The srvtab file contains the encryption keys for each service on the local
host. Any host offering network services would have a key here, although
many such files can be used.
The principal.* files comprise the Kerberos database itself, and contain
keys for all principles, and should not be world-readable.
The kerberos.conf file contains the configuration for this machine:
- which realm I'm in
- which servers I should talk to for this realm
The kerberos.realms file contains the name of Kerberos servers for
various (sub)domains.
Kerberos log information it placed in /var/log/kerberos.log
(see rc.local to change it)
The register_keys directory contains a set of files (all of which begin
with "."), each of which contains a des key used for registering new users
with the system. It is used only by the "registerd" program, and only on
a Kerberos server host.

2
etc/kerberosIV/krb.conf
View File

@ -1,2 +0,0 @@
me.MY.DOMAIN
me.MY.DOMAIN my.TRUSTED.FRIEND

1
etc/kerberosIV/krb.realms
View File

@ -1 +0,0 @@
.MY.DOMAIN me.MY.DOMAIN

3
etc/mtree/special
View File

@ -1,4 +1,4 @@
# $NetBSD: special,v 1.91 2006/02/11 09:33:16 agc Exp $
# $NetBSD: special,v 1.92 2006/03/23 20:02:57 wiz Exp $
# @(#)special 8.2 (Berkeley) 1/23/94
#
# Hand-crafted mtree specification for the dangerous files.
@ -77,7 +77,6 @@
./etc/iscsi type=dir mode=0755
./etc/iscsi/auths type=file mode=0600
./etc/iscsi/targets type=file mode=0644
./etc/kerberosIV type=dir mode=0755 ignore optional
./etc/ld.so.conf type=file mode=0644 optional
./etc/lkm.conf type=file mode=0644 optional
./etc/localtime type=link mode=0755