Attachment 2478 Details for Bug 6469 – krb5_server_setup.sh script for qa testers to install and create principals.

krb5_server_setup.sh script for qa testers to install and create principals.

krb5_server_setup.sh (text/plain), 2.70 KB, created by Dave Hodgins on 2012-06-21 03:08:47 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Dave Hodgins

Created: 2012-06-21 03:08:47 CEST

Size: 2.70 KB

patch

obsolete

>#!/bin/bash
>
>user="${1:-root}" # If no user specified, default to root.
>
>hostname=$(hostname)
>
>printf '%s\n' "Checking dns setup for $hostname"
>ipaddrstring=$(host "$hostname")
>ipaddr="${ipaddrstring##*address }" # strip string 'address ' and everything before it
>#printf '%s\n' "host $hostname returns ip address $ipaddr"
>
>hostnamebyipaddrstring=$(host "$ipaddr")
>hostnamebyipaddr="${hostnamebyipaddrstring##*pointer }"
>hostnamebyipaddr="${hostnamebyipaddr%[\.]*}" # strip last period and anything following it.
>#printf '%s\n' "reverse dns for $ipaddr points to $hostnamebyipaddr"
>
>if  [ "$hostnamebyipaddr" == "$hostname" ] ; then
>    printf '%s\n' "Good. Forward and reverse dsn settings for $hostname match"
>else
>    printf '%s\n' "Forward and reverse dsn settings for $hostname DO NOT MATCH!"
>    exit 1
>fi
>
>realm=$(echo "$hostname" | tr a-z A-Z)
>printf '%s\n' "The realm name will be set to $realm"
>
>installlist=""
>
>if  [ ! -e /usr/sbin/krb5kdc ] ; then
>    installlist="$installlist krb5-server"
>fi
>
>if  [ ! -e /usr/sbin/login.krb5 ] ; then
>    installlist="$installlist krb5-appl-servers"
>fi
>
>if  [ ! -e /usr/bin/kinit ] ; then
>    installlist="$installlist  krb5-workstation"
>fi
>
>if  [ ! -e /usr/bin/krlogin ] ; then
>    installlist="$installlist krb5-appl-clients"
>fi
>
>if  [ -n "$installlist" ] ; then
>    urpmi $installlist
>fi
>
>if  [[ $(grep "EXAMPLE.COM" /etc/kerberos/krb5kdc/kdc.conf) ]]; then
>    printf '%s\n' "Setting realm name in /etc/kerberos/krb5kdc/kdc.conf"
>    sed -i.original "s/EXAMPLE.COM/$realm/" /etc/kerberos/krb5kdc/kdc.conf
>fi
>
>if  [[ $(grep "EXAMPLE.COM" /etc/krb5.conf) ]]; then
>    printf '%s\n' "Setting realm and host names in /etc/krb5.conf"
>    sed -i.original -e "s/EXAMPLE.COM/$realm/" -e "s/kerberos.example.com/$hostname/" -e "s/example.com/$hostname/" /etc/krb5.conf
>fi
>
>if  [[ $(grep "EXAMPLE.COM" /etc/kerberos/krb5kdc/kadm5.acl) ]]; then
>    printf '%s\n' "Setting realm name in /etc/kerberos/krb5kdc/kadm5.acl"
>    sed -i.original "s/EXAMPLE.COM/$realm/" /etc/kerberos/krb5kdc/kadm5.acl
>fi
>
>if  [ ! -e  /etc/kerberos/krb5kdc/principal ] ; then
>    kdb5_util create -r "$realm" -s
>fi
>
>kadmin.local -q "addprinc admin/admin@$hostname"
>kadmin.local -p admin/admin -q "addprinc $user/admin@$realm"
>kadmin.local -p admin/admin -q "ktadd -k /etc/kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw"
>kadmin.local -p admin/admin -q "addprinc -randkey host/$hostname"
>kadmin.local -p admin/admin -q "ktadd -norandkey host/$hostname"
>kadmin.local -p admin/admin -q "addprinc $user"
>service krb5kdc start && service kadmin start && printf '%s\n' "kerberos server setup complete"
>chkconfig krb5kdc on
>chkconfig kadmin on
>printf '%s\n'  "Copy /etc/krb5.conf to any client stations, and install krb5-appl-clients on them"
>

#!/bin/bash

user="${1:-root}" # If no user specified, default to root.

hostname=$(hostname)

printf '%s\n' "Checking dns setup for $hostname"
ipaddrstring=$(host "$hostname")
ipaddr="${ipaddrstring##*address }" # strip string 'address ' and everything before it
#printf '%s\n' "host $hostname returns ip address $ipaddr"

hostnamebyipaddrstring=$(host "$ipaddr")
hostnamebyipaddr="${hostnamebyipaddrstring##*pointer }"
hostnamebyipaddr="${hostnamebyipaddr%[\.]*}" # strip last period and anything following it.
#printf '%s\n' "reverse dns for $ipaddr points to $hostnamebyipaddr"

if  [ "$hostnamebyipaddr" == "$hostname" ] ; then
    printf '%s\n' "Good. Forward and reverse dsn settings for $hostname match"
else
    printf '%s\n' "Forward and reverse dsn settings for $hostname DO NOT MATCH!"
    exit 1
fi

realm=$(echo "$hostname" | tr a-z A-Z)
printf '%s\n' "The realm name will be set to $realm"

installlist=""

if  [ ! -e /usr/sbin/krb5kdc ] ; then
    installlist="$installlist krb5-server"
fi

if  [ ! -e /usr/sbin/login.krb5 ] ; then
    installlist="$installlist krb5-appl-servers"
fi

if  [ ! -e /usr/bin/kinit ] ; then
    installlist="$installlist  krb5-workstation"
fi

if  [ ! -e /usr/bin/krlogin ] ; then
    installlist="$installlist krb5-appl-clients"
fi

if  [ -n "$installlist" ] ; then
    urpmi $installlist
fi

if  [[ $(grep "EXAMPLE.COM" /etc/kerberos/krb5kdc/kdc.conf) ]]; then
    printf '%s\n' "Setting realm name in /etc/kerberos/krb5kdc/kdc.conf"
    sed -i.original "s/EXAMPLE.COM/$realm/" /etc/kerberos/krb5kdc/kdc.conf
fi

if  [[ $(grep "EXAMPLE.COM" /etc/krb5.conf) ]]; then
    printf '%s\n' "Setting realm and host names in /etc/krb5.conf"
    sed -i.original -e "s/EXAMPLE.COM/$realm/" -e "s/kerberos.example.com/$hostname/" -e "s/example.com/$hostname/" /etc/krb5.conf
fi

if  [[ $(grep "EXAMPLE.COM" /etc/kerberos/krb5kdc/kadm5.acl) ]]; then
    printf '%s\n' "Setting realm name in /etc/kerberos/krb5kdc/kadm5.acl"
    sed -i.original "s/EXAMPLE.COM/$realm/" /etc/kerberos/krb5kdc/kadm5.acl
fi

if  [ ! -e  /etc/kerberos/krb5kdc/principal ] ; then
    kdb5_util create -r "$realm" -s
fi

kadmin.local -q "addprinc admin/admin@$hostname"
kadmin.local -p admin/admin -q "addprinc $user/admin@$realm"
kadmin.local -p admin/admin -q "ktadd -k /etc/kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw"
kadmin.local -p admin/admin -q "addprinc -randkey host/$hostname"
kadmin.local -p admin/admin -q "ktadd -norandkey host/$hostname"
kadmin.local -p admin/admin -q "addprinc $user"
service krb5kdc start && service kadmin start && printf '%s\n' "kerberos server setup complete"
chkconfig krb5kdc on
chkconfig kadmin on
printf '%s\n'  "Copy /etc/krb5.conf to any client stations, and install krb5-appl-clients on them"

Actions: View

Attachments on bug 6469: 2476 | 2478 | 2526