[debian-edu-commits] [Git][debian-edu/debian-edu-config][master] Improve kadm5.acl bug fix.

[WolfgangSchweer]

WolfgangSchweer pushed to branch master at Debian Edu / debian-edu-config


Commits:
c4677b97 by Wolfgang Schweer at 2019-12-16T11:02:32Z
Improve kadm5.acl bug fix.

share/debian-edu-config/tools/kerberos-kdc-init:
Also disable inquiries to the Kerberos database for ordinary users.

debian/debian-edu-config.postinst:
Restart krb5-admin-server if the fix gets applied via upgrades.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -


2 changed files:

- debian/debian-edu-config.postinst
- share/debian-edu-config/tools/kerberos-kdc-init


Changes:

=====================================
debian/debian-edu-config.postinst
=====================================
@@ -194,7 +194,8 @@ configure)
 
     # Set proper rights for users.
     if [ -f /etc/krb5kdc/kadm5.acl ] ; then
-        sed -i 's/cil/Cil/' /etc/krb5kdc/kadm5.acl
+        sed -i 's/cil/CIl/' /etc/krb5kdc/kadm5.acl
+        service krb5-admin-server restart
     fi
     ;;
 esac


=====================================
share/debian-edu-config/tools/kerberos-kdc-init
=====================================
@@ -181,7 +181,7 @@ EOF
     if [ ! -f /etc/krb5kdc/kadm5.acl ] ; then
 	cat > /etc/krb5kdc/kadm5.acl <<EOF
 root/admin at INTERN *
-*@INTERN Cil
+*@INTERN CIl
 */*@INTERN i
 EOF
     chmod 644 /etc/krb5kdc/kadm5.acl



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/c4677b9726b95ac12e4372d8bab790934e6853f7

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/c4677b9726b95ac12e4372d8bab790934e6853f7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20191216/affab24f/attachment.html>