[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Patch for some irritating white spots in the docs.



Hi, 

frustrated with the lack of hands-on advice for client and server setup in
the docs, I've made a little hackish add-on to them. Patch attached. 

Test and use, if you feel it's appropriate. If I'm beating the wrong horse,
please tell me so, not forgetting to point me in the right direction.

rgds, 
-- 
Måns Nilsson            Systems Specialist
+46 70 681 7204         KTHNOC  MN1334-RIPE

We're sysadmins. To us, data is a protocol-overhead.
--- setup.texi	2002/02/03 09:54:10	1.1
+++ setup.texi	2002/04/02 13:21:34
@@ -288,8 +288,46 @@
 @node Testing clients and servers, Slave Servers, Password changing, Setting up a realm
 @section Testing clients and servers
 
-Now you should be able to run all the clients and servers.  Refer to the
-appropriate man pages for information on how to use them.
+Now you should be able to run all the clients and servers.  
+
+Some examples:
+
+@subsection su
+"su" works like normal su, but for Kerberos functionality (ie
+privileges elevation using a root instance) the su-ing users instance
+must be present in a file called @code{.k5login} in the home directory
+of the "target user". So, if @code{joe@@REALM} wants to be root on a
+machine, his root instance (@code{joe/root@@REALM}) must be present on a
+line in @code{~root/.k5login.} If not, su will fall back to the normal
+Unix root password authentication.
+
+@subsection Telnetd
+For telnet, the host instance is used for authentication. In
+@code{/etc/inetd.conf}, insert the following:
+@example
+telnet  stream  tcp nowait  root /usr/heimdal/libexec/telnetd  telnetd -a user
+@end example
+Restart/kill -HUP inetd. 
+
+@subsection Ftpd
+For ftp, a new instance is needed. It must be called
+@code{ftp/hostname.fqdn@@REALM} and it is created analogously to the host instance, with the commands 
+@example
+kadmin> ank --random-password ftp/hostname.fqdn@@REALM
+@end example
+which creates the key, and 
+@example
+kadmin> ext ftp/hostname.fqdn@@REALM
+@end example
+which extracts it. The latter must be done on the host, because it
+extracts data to a local file.  In
+@code{/etc/inetd.conf}, insert the following:
+@example
+ftp     stream  tcp nowait root /usr/heimdal/libexec/ftpd ftpd 
+@end example 
+Restart/kill -HUP inetd.
+
+Refer to the appropriate man pages for further information on clients and servers.
 
 @node Slave Servers, Incremental propagation, Testing clients and servers, Setting up a realm
 @section Slave servers, Incremental propagation, Testing clients and servers, Setting up a realm