aboutsummaryrefslogtreecommitdiff
path: root/files/etc
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc')
-rw-r--r--files/etc/krb5.conf.common29
-rw-r--r--files/etc/login.conf.freebsd3
2 files changed, 31 insertions, 1 deletions
diff --git a/files/etc/krb5.conf.common b/files/etc/krb5.conf.common
new file mode 100644
index 0000000..aa2c11f
--- /dev/null
+++ b/files/etc/krb5.conf.common
@@ -0,0 +1,29 @@
+[libdefaults]
+ default_realm = ${realm}
+ dns_lookup_kdc = true
+ dns_lookup_realm = false
+ allow_weak_crypto = false
+ permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
+ default_client_keytab_name = /var/db/keytabs/%{euid}.keytab
+ # Breaks screenlockers
+ # verify_ap_req_nofail = true
+
+[appdefaults]
+ pam = {
+ minimum_uid = 1000
+ ccache = FILE:/tmp/krb5cc_%u_XXXXXX
+ forwardable = true
+ ticket_lifetime = ${krb5_ticket_lifetime}
+ renew_lifetime = ${krb5_renew_lifetime}
+ }
+
+[realms]
+ ${realm} = {
+$(for host in $ldap_hosts; do echo "\
+ admin_server = ${host}"; done)
+ default_domain = ${domain}
+ }
+
+[domain_realm]
+ .${domain} = ${realm}
+ ${domain} = ${realm}
diff --git a/files/etc/login.conf.freebsd b/files/etc/login.conf.freebsd
index b7def42..e712b88 100644
--- a/files/etc/login.conf.freebsd
+++ b/files/etc/login.conf.freebsd
@@ -4,7 +4,7 @@ default:\\
:welcome=/var/run/motd:\\
:setenv=BLOCKSIZE=K:\\
:mail=/var/mail/$:\\
- :path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\\
+ :path=/sbin /bin /usr/local/sbin /usr/local/bin /usr/sbin /usr/bin ~/bin:\\
:nologin=/var/run/nologin:\\
:cputime=unlimited:\\
:datasize=unlimited:\\
@@ -59,6 +59,7 @@ dialer:\\
# N.B. login_getpwclass(3) will use this entry for the root account,
# in preference to 'default'.
root:\\
+ :path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\\
:ignorenologin:\\
:memorylocked=unlimited:\\
:tc=default: