From eab5eca5bda076aae57e6cc82b6e08dbd5025ff3 Mon Sep 17 00:00:00 2001 From: Tom Barrett Date: Fri, 20 Mar 2020 04:30:39 -0500 Subject: new way of generating interfaces, only have to change hosts file now --- configs/interfaces | 14 ++++++++++++++ configs/kerberos/interfaces | 14 -------------- configs/kerberos/kadm5.acl | 6 ------ configs/kerberos/kdc.conf | 16 ---------------- configs/kerberos/krb5.conf | 13 ------------- configs/krb/kadm5.acl | 6 ++++++ configs/krb/kdc.conf | 16 ++++++++++++++++ configs/krb/krb5.conf | 13 +++++++++++++ configs/ldap/interfaces | 14 -------------- configs/nfs/interfaces | 14 -------------- 10 files changed, 49 insertions(+), 77 deletions(-) create mode 100644 configs/interfaces delete mode 100644 configs/kerberos/interfaces delete mode 100644 configs/kerberos/kadm5.acl delete mode 100644 configs/kerberos/kdc.conf delete mode 100644 configs/kerberos/krb5.conf create mode 100644 configs/krb/kadm5.acl create mode 100644 configs/krb/kdc.conf create mode 100644 configs/krb/krb5.conf delete mode 100644 configs/ldap/interfaces delete mode 100644 configs/nfs/interfaces (limited to 'configs') diff --git a/configs/interfaces b/configs/interfaces new file mode 100644 index 0000000..b663d7f --- /dev/null +++ b/configs/interfaces @@ -0,0 +1,14 @@ +# This file describes the network interfaces available on your system +# and how to activate them. For more information, see interfaces(5). + +# The loopback network interface +auto lo +iface lo inet loopback + +auto eth0 +iface eth0 inet static + address ADDRESS/24 + post-up route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 + pre-down route del -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 + +source /etc/network/interfaces.d/*.cfg diff --git a/configs/kerberos/interfaces b/configs/kerberos/interfaces deleted file mode 100644 index cf65d6a..0000000 --- a/configs/kerberos/interfaces +++ /dev/null @@ -1,14 +0,0 @@ -# This file describes the network interfaces available on your system -# and how to activate them. For more information, see interfaces(5). - -# The loopback network interface -auto lo -iface lo inet loopback - -auto eth0 -iface eth0 inet static - address 192.168.122.100/24 - post-up route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - pre-down route del -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - -source /etc/network/interfaces.d/*.cfg diff --git a/configs/kerberos/kadm5.acl b/configs/kerberos/kadm5.acl deleted file mode 100644 index 76df603..0000000 --- a/configs/kerberos/kadm5.acl +++ /dev/null @@ -1,6 +0,0 @@ -# This file Is the access control list for krb5 administration. -# When this file is edited run service krb5-admin-server restart to activate -# One common way to set up Kerberos administration is to allow any principal -# ending in /admin is given full administrative rights. -# To enable this, uncomment the following line: -*/admin * diff --git a/configs/kerberos/kdc.conf b/configs/kerberos/kdc.conf deleted file mode 100644 index baa19a0..0000000 --- a/configs/kerberos/kdc.conf +++ /dev/null @@ -1,16 +0,0 @@ -[kdcdefaults] - kdc_ports = 750,88 - -[realms] - HADES.HR = { - database_name = /var/lib/krb5kdc/principal - admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab - acl_file = /etc/krb5kdc/kadm5.acl - key_stash_file = /etc/krb5kdc/stash - kdc_ports = 750,88 - max_life = 10h 0m 0s - max_renewable_life = 7d 0h 0m 0s - master_key_type = des3-hmac-sha1 - #supported_enctypes = aes256-cts:normal aes128-cts:normal - default_principal_flags = +preauth - } diff --git a/configs/kerberos/krb5.conf b/configs/kerberos/krb5.conf deleted file mode 100644 index c78717b..0000000 --- a/configs/kerberos/krb5.conf +++ /dev/null @@ -1,13 +0,0 @@ -[libdefaults] - default_realm = HADES.HR - -[realms] - HADES.HR = { - kdc = krb.hades.hr - admin_server = krb.hades.hr - default_domain = hades.hr - } - -[domain_realm] - .hades.hr = HADES.HR - hades.hr = HADES.HR diff --git a/configs/krb/kadm5.acl b/configs/krb/kadm5.acl new file mode 100644 index 0000000..76df603 --- /dev/null +++ b/configs/krb/kadm5.acl @@ -0,0 +1,6 @@ +# This file Is the access control list for krb5 administration. +# When this file is edited run service krb5-admin-server restart to activate +# One common way to set up Kerberos administration is to allow any principal +# ending in /admin is given full administrative rights. +# To enable this, uncomment the following line: +*/admin * diff --git a/configs/krb/kdc.conf b/configs/krb/kdc.conf new file mode 100644 index 0000000..baa19a0 --- /dev/null +++ b/configs/krb/kdc.conf @@ -0,0 +1,16 @@ +[kdcdefaults] + kdc_ports = 750,88 + +[realms] + HADES.HR = { + database_name = /var/lib/krb5kdc/principal + admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab + acl_file = /etc/krb5kdc/kadm5.acl + key_stash_file = /etc/krb5kdc/stash + kdc_ports = 750,88 + max_life = 10h 0m 0s + max_renewable_life = 7d 0h 0m 0s + master_key_type = des3-hmac-sha1 + #supported_enctypes = aes256-cts:normal aes128-cts:normal + default_principal_flags = +preauth + } diff --git a/configs/krb/krb5.conf b/configs/krb/krb5.conf new file mode 100644 index 0000000..c78717b --- /dev/null +++ b/configs/krb/krb5.conf @@ -0,0 +1,13 @@ +[libdefaults] + default_realm = HADES.HR + +[realms] + HADES.HR = { + kdc = krb.hades.hr + admin_server = krb.hades.hr + default_domain = hades.hr + } + +[domain_realm] + .hades.hr = HADES.HR + hades.hr = HADES.HR diff --git a/configs/ldap/interfaces b/configs/ldap/interfaces deleted file mode 100644 index 78fd4c1..0000000 --- a/configs/ldap/interfaces +++ /dev/null @@ -1,14 +0,0 @@ -# This file describes the network interfaces available on your system -# and how to activate them. For more information, see interfaces(5). - -# The loopback network interface -auto lo -iface lo inet loopback - -auto eth0 -iface eth0 inet static - address 192.168.122.120/24 - post-up route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - pre-down route del -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - -source /etc/network/interfaces.d/*.cfg diff --git a/configs/nfs/interfaces b/configs/nfs/interfaces deleted file mode 100644 index f5d11ed..0000000 --- a/configs/nfs/interfaces +++ /dev/null @@ -1,14 +0,0 @@ -# This file describes the network interfaces available on your system -# and how to activate them. For more information, see interfaces(5). - -# The loopback network interface -auto lo -iface lo inet loopback - -auto eth0 -iface eth0 inet static - address 192.168.122.110/24 - post-up route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - pre-down route del -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.122.1 - -source /etc/network/interfaces.d/*.cfg -- cgit v1.2.3