Attachment 9586 Details for Bug 21369 – Updated kerberos setup script for qa testing

Updated kerberos setup script for qa testing

krb5_server_setup.sh (text/plain), 3.62 KB, created by Dave Hodgins on 2017-08-12 01:01:37 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Dave Hodgins

Created: 2017-08-12 01:01:37 CEST

Size: 3.62 KB

patch

obsolete

>#!/bin/bash
>#
># In Mageia 6, the file /etc/krb5.conf from the package krb5 was changed to add the comment character
># to the start of some of the example lines, which this script modifies to the needed values. As the
># file only contains one line that needs to be kept as a comment, this script will now remove the '#'
># characters from all lines in that file, then re-adds it for the default_ccache_name line, as the
># easiest way to maintain compatibility with Mageia 5.
>#
># Changelog:
># - 2017-08-11 Remove unwanted '#' characters from /etc/krb.conf for Mageia 6
>#
>user="${1:-root}" # If no user specified, default to root.
>
>hostname=$(hostname)
>
>printf '%s\n' "Checking dns setup for $hostname"
>ipaddrstring=$(host "$hostname")
>ipaddr="${ipaddrstring##*address }" # strip string 'address ' and everything before it
>#printf '%s\n' "host $hostname returns ip address $ipaddr"
>
>hostnamebyipaddrstring=$(host "$ipaddr")
>hostnamebyipaddr="${hostnamebyipaddrstring##*pointer }"
>hostnamebyipaddr="${hostnamebyipaddr%[\.]*}" # strip last period and anything following it.
>#printf '%s\n' "reverse dns for $ipaddr points to $hostnamebyipaddr"
>
>if  [ "$hostnamebyipaddr" == "$hostname" ] ; then
>    printf '%s\n' "Good. Forward and reverse dsn settings for $hostname match"
>else
>    printf '%s\n' "Forward and reverse dsn settings for $hostname DO NOT MATCH!"
>    exit 1
>fi
>
>hostnameupper=$(echo "$hostname" | tr a-z A-Z)
>realm=${2:-$hostnameupper}
>printf '%s\n' "The realm name will be set to $realm"
>
>installlist=""
>
>if  [ ! -e /usr/sbin/krb5kdc ] ; then
>    installlist="$installlist krb5-server"
>fi
>
>if  [ ! -e /usr/sbin/login.krb5 ] ; then
>    installlist="$installlist krb5-appl-servers"
>fi
>
>if  [ ! -e /usr/bin/kinit ] ; then
>    installlist="$installlist  krb5-workstation"
>fi
>
>if  [ ! -e /usr/bin/krlogin ] ; then
>    installlist="$installlist krb5-appl-clients"
>fi
>
>if  [ -n "$installlist" ] ; then
>    urpmi $installlist
>fi
>
>kdcconflocation=$(rpm -q -l krb5-server|grep /kdc.conf$)
>kadm5acllocation=$(rpm -q -l krb5-server|grep /kadm5.acl$)
>
>if  [[ $(grep "EXAMPLE.COM" $kdcconflocation) ]]; then
>    printf '%s\n' "Setting realm name in $kdcconflocation"
>    sed -i.original "s/EXAMPLE.COM/$realm/" $kdcconflocation
>fi
>
>if  [[ $(grep "EXAMPLE.COM" /etc/krb5.conf) ]]; then
>    printf '%s\n' "Removing '#' characters and setting realm and host names in /etc/krb5.conf"
>    sed -i.original -e "s/#//" -e "s/EXAMPLE.COM/$realm/" -e "s/kerberos.example.com/$hostname/" \
>        -e "s/example.com/$hostname/" -e "s/default_ccache_name/# default_ccache_name/" /etc/krb5.conf
>fi
>
>if  [[ $(grep "EXAMPLE.COM" $kadm5acllocation) ]]; then
>    printf '%s\n' "Setting realm name in $kadm5acllocation"
>    sed -i.original "s/EXAMPLE.COM/$realm/" $kadm5acllocation
>fi
>
>database_name=/var/lib/krb5kdc/principal
>eval $(sed 's/ //g' $kdcconflocation|grep ^database_name)
>
>admin_keytab=/etc/kerberos/krb5kdc/kadm5.keytab
>eval $(sed 's/ //g' $kdcconflocation|grep ^admin_keytab)
>
>if  [ ! -e  $database_name ] ; then
>    printf '%s\n' "Creating database in $database_name"
>    kdb5_util create -r "$realm" -s
>fi
>
>kadmin.local -q "addprinc admin/admin@$hostname"
>kadmin.local -p admin/admin -q "addprinc $user/admin@$realm"
>kadmin.local -p admin/admin -q "ktadd -k $admin_keytab kadmin/admin kadmin/changepw"
>kadmin.local -p admin/admin -q "addprinc -randkey host/$hostname"
>kadmin.local -p admin/admin -q "ktadd -norandkey host/$hostname"
>kadmin.local -p admin/admin -q "addprinc $user"
>service krb5kdc start && service kadmin start && printf '%s\n' "kerberos server setup complete"
>chkconfig krb5kdc on
>chkconfig kadmin on
>printf '%s\n'  "Copy /etc/krb5.conf to any client stations, and install krb5-appl-clients on them"
>

#!/bin/bash
#
# In Mageia 6, the file /etc/krb5.conf from the package krb5 was changed to add the comment character
# to the start of some of the example lines, which this script modifies to the needed values. As the
# file only contains one line that needs to be kept as a comment, this script will now remove the '#'
# characters from all lines in that file, then re-adds it for the default_ccache_name line, as the
# easiest way to maintain compatibility with Mageia 5.
#
# Changelog:
# - 2017-08-11 Remove unwanted '#' characters from /etc/krb.conf for Mageia 6
#
user="${1:-root}" # If no user specified, default to root.

hostname=$(hostname)

printf '%s\n' "Checking dns setup for $hostname"
ipaddrstring=$(host "$hostname")
ipaddr="${ipaddrstring##*address }" # strip string 'address ' and everything before it
#printf '%s\n' "host $hostname returns ip address $ipaddr"

hostnamebyipaddrstring=$(host "$ipaddr")
hostnamebyipaddr="${hostnamebyipaddrstring##*pointer }"
hostnamebyipaddr="${hostnamebyipaddr%[\.]*}" # strip last period and anything following it.
#printf '%s\n' "reverse dns for $ipaddr points to $hostnamebyipaddr"

if  [ "$hostnamebyipaddr" == "$hostname" ] ; then
    printf '%s\n' "Good. Forward and reverse dsn settings for $hostname match"
else
    printf '%s\n' "Forward and reverse dsn settings for $hostname DO NOT MATCH!"
    exit 1
fi

hostnameupper=$(echo "$hostname" | tr a-z A-Z)
realm=${2:-$hostnameupper}
printf '%s\n' "The realm name will be set to $realm"

installlist=""

if  [ ! -e /usr/sbin/krb5kdc ] ; then
    installlist="$installlist krb5-server"
fi

if  [ ! -e /usr/sbin/login.krb5 ] ; then
    installlist="$installlist krb5-appl-servers"
fi

if  [ ! -e /usr/bin/kinit ] ; then
    installlist="$installlist  krb5-workstation"
fi

if  [ ! -e /usr/bin/krlogin ] ; then
    installlist="$installlist krb5-appl-clients"
fi

if  [ -n "$installlist" ] ; then
    urpmi $installlist
fi

kdcconflocation=$(rpm -q -l krb5-server|grep /kdc.conf$)
kadm5acllocation=$(rpm -q -l krb5-server|grep /kadm5.acl$)

if  [[ $(grep "EXAMPLE.COM" $kdcconflocation) ]]; then
    printf '%s\n' "Setting realm name in $kdcconflocation"
    sed -i.original "s/EXAMPLE.COM/$realm/" $kdcconflocation
fi

if  [[ $(grep "EXAMPLE.COM" /etc/krb5.conf) ]]; then
    printf '%s\n' "Removing '#' characters and setting realm and host names in /etc/krb5.conf"
    sed -i.original -e "s/#//" -e "s/EXAMPLE.COM/$realm/" -e "s/kerberos.example.com/$hostname/" \
        -e "s/example.com/$hostname/" -e "s/default_ccache_name/# default_ccache_name/" /etc/krb5.conf
fi

if  [[ $(grep "EXAMPLE.COM" $kadm5acllocation) ]]; then
    printf '%s\n' "Setting realm name in $kadm5acllocation"
    sed -i.original "s/EXAMPLE.COM/$realm/" $kadm5acllocation
fi

database_name=/var/lib/krb5kdc/principal
eval $(sed 's/ //g' $kdcconflocation|grep ^database_name)

admin_keytab=/etc/kerberos/krb5kdc/kadm5.keytab
eval $(sed 's/ //g' $kdcconflocation|grep ^admin_keytab)

if  [ ! -e  $database_name ] ; then
    printf '%s\n' "Creating database in $database_name"
    kdb5_util create -r "$realm" -s
fi

kadmin.local -q "addprinc admin/admin@$hostname"
kadmin.local -p admin/admin -q "addprinc $user/admin@$realm"
kadmin.local -p admin/admin -q "ktadd -k $admin_keytab kadmin/admin kadmin/changepw"
kadmin.local -p admin/admin -q "addprinc -randkey host/$hostname"
kadmin.local -p admin/admin -q "ktadd -norandkey host/$hostname"
kadmin.local -p admin/admin -q "addprinc $user"
service krb5kdc start && service kadmin start && printf '%s\n' "kerberos server setup complete"
chkconfig krb5kdc on
chkconfig kadmin on
printf '%s\n'  "Copy /etc/krb5.conf to any client stations, and install krb5-appl-clients on them"

Actions: View

Attachments on bug 21369: 9586