[debian-edu-commits] [Git][debian-edu/debian-edu-config][master] share/debian-edu-config/tools/kerberos-kdc-init:

[WolfgangSchweer]

WolfgangSchweer pushed to branch master at Debian Edu / debian-edu-config


Commits:
fc5da005 by Wolfgang Schweer at 2019-12-15T23:38:52Z
share/debian-edu-config/tools/kerberos-kdc-init:
Set proper rights for users in kadm5.acl file. (Closes: #946797)

Adjust debian/debian-edu-config.postinst to fix kadm5.acl upon upgrades.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -


3 changed files:

- debian/changelog
- debian/debian-edu-config.postinst
- share/debian-edu-config/tools/kerberos-kdc-init


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,11 @@
+debian-edu-config (2.11.10) UNRELEASED; urgency=medium
+
+  * share/debian-edu-config/tools/kerberos-kdc-init:
+    - Set proper rights for users in kadm5.acl file. (Closes: #946797)
+  * Adjust debian/debian-edu-config.postinst to fix kadm5.acl upon upgrades.
+
+ -- Wolfgang Schweer <wschweer at arcor.de>  Mon, 16 Dec 2019 00:27:09 +0100
+
 debian-edu-config (2.11.9) unstable; urgency=medium
 
   [ Wolfgang Schweer ]


=====================================
debian/debian-edu-config.postinst
=====================================
@@ -191,6 +191,11 @@ configure)
         cp /etc/cfengine3/debian-edu/edu.cf /var/lib/cfengine3/inputs/debian-edu
         cp /etc/cfengine3/debian-edu/promises.cf /var/lib/cfengine3/inputs
     fi
+
+    # Set proper rights for users.
+    if [ -f /etc/krb5kdc/kadm5.acl ] ; then
+        sed -i 's/cil/Cil/' /etc/krb5kdc/kadm5.acl
+    fi
     ;;
 esac
 


=====================================
share/debian-edu-config/tools/kerberos-kdc-init
=====================================
@@ -181,7 +181,7 @@ EOF
     if [ ! -f /etc/krb5kdc/kadm5.acl ] ; then
 	cat > /etc/krb5kdc/kadm5.acl <<EOF
 root/admin at INTERN *
-*@INTERN cil
+*@INTERN Cil
 */*@INTERN i
 EOF
     chmod 644 /etc/krb5kdc/kadm5.acl



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/fc5da005cfd6cd71fa6870569351385f527d38ae

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/fc5da005cfd6cd71fa6870569351385f527d38ae
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20191215/a04fa4ab/attachment-0001.html>