diff options
Diffstat (limited to 'files/etc')
-rw-r--r-- | files/etc/krb5.conf.common | 29 | ||||
-rw-r--r-- | files/etc/login.conf.freebsd | 3 |
2 files changed, 31 insertions, 1 deletions
diff --git a/files/etc/krb5.conf.common b/files/etc/krb5.conf.common new file mode 100644 index 0000000..aa2c11f --- /dev/null +++ b/files/etc/krb5.conf.common @@ -0,0 +1,29 @@ +[libdefaults] + default_realm = ${realm} + dns_lookup_kdc = true + dns_lookup_realm = false + allow_weak_crypto = false + permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 + default_client_keytab_name = /var/db/keytabs/%{euid}.keytab + # Breaks screenlockers + # verify_ap_req_nofail = true + +[appdefaults] + pam = { + minimum_uid = 1000 + ccache = FILE:/tmp/krb5cc_%u_XXXXXX + forwardable = true + ticket_lifetime = ${krb5_ticket_lifetime} + renew_lifetime = ${krb5_renew_lifetime} + } + +[realms] + ${realm} = { +$(for host in $ldap_hosts; do echo "\ + admin_server = ${host}"; done) + default_domain = ${domain} + } + +[domain_realm] + .${domain} = ${realm} + ${domain} = ${realm} diff --git a/files/etc/login.conf.freebsd b/files/etc/login.conf.freebsd index b7def42..e712b88 100644 --- a/files/etc/login.conf.freebsd +++ b/files/etc/login.conf.freebsd @@ -4,7 +4,7 @@ default:\\ :welcome=/var/run/motd:\\ :setenv=BLOCKSIZE=K:\\ :mail=/var/mail/$:\\ - :path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\\ + :path=/sbin /bin /usr/local/sbin /usr/local/bin /usr/sbin /usr/bin ~/bin:\\ :nologin=/var/run/nologin:\\ :cputime=unlimited:\\ :datasize=unlimited:\\ @@ -59,6 +59,7 @@ dialer:\\ # N.B. login_getpwclass(3) will use this entry for the root account, # in preference to 'default'. root:\\ + :path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\\ :ignorenologin:\\ :memorylocked=unlimited:\\ :tc=default: |