diff options
Diffstat (limited to 'src/kadmin/testing/scripts/fixup-conf-files.pl.in')
| -rw-r--r-- | src/kadmin/testing/scripts/fixup-conf-files.pl.in | 344 |
1 files changed, 0 insertions, 344 deletions
diff --git a/src/kadmin/testing/scripts/fixup-conf-files.pl.in b/src/kadmin/testing/scripts/fixup-conf-files.pl.in deleted file mode 100644 index d7834d1c74..0000000000 --- a/src/kadmin/testing/scripts/fixup-conf-files.pl.in +++ /dev/null @@ -1,344 +0,0 @@ -#!/usr/local/bin/perl -# -# Usage: fixup-conf-files.pl [-server hostname] - -$verbose = $ENV{'VERBOSE_TEST'}; -$archos = $ENV{'ARCH_OS'}; - -$REALM = "SECURE-TEST.OV.COM"; - -sub replace { - local($old, $new, $backup) = @_; - local($dev, $ino, $mode); - - $new = $old.".new" if !$new; - $backup = $old.".bak" if !$backup; - - chmod($mode,$new) if (($dev, $ino, $mode) = stat($old)); - - unlink($backup); - link($old, $backup) || die "couldn't make backup link: $backup: $!\n" - if -e $old; - rename($new, $old) || die "couldn't rename $old to $new: $!\n"; -} - -if (@ARGV == 2 && $ARGV[0] eq "-server") { - $servername = $ARGV[1]; -} elsif (@ARGV != 0) { - print STDERR "Usage: $0 fixup-conf-files.pl [-server hostname]\n"; -} - -sub canonicalize_name { - local($hostname) = @_; - local($d, $addr, $addrtype); - - ($host,$d,$addrtype,$d,$addr) = gethostbyname($hostname); - die "couldn't get hostname $hostname\n" if !$host; - ($host) = gethostbyaddr($addr,$addrtype); - die "couldn't reverse-resolve $hostname\n" if !$host; - return $host; -} - -## Get server's canonical hostname. -if ($servername) { - $serverhost = $servername; -} else { - chop ($serverhost = `hostname`); -} -$serverhost = &canonicalize_name($serverhost); - -## Get local canonical hostname -chop($localhost=`hostname`); -$localhost = &canonicalize_name($localhost); - -## parse krb.conf - -if (open(KCONF, "/etc/athena/krb.conf")) { - chop($hrealm = <KCONF>); - - $confok = 0; - - while(<KCONF>) { - $confs .= $_ if !/^$REALM\s+/o; - $confok = 1 if /^$REALM\s+$serverhost\s+admin\s+server$/oi; - } - - close(KCONF); -} - -## rewrite krb.conf if necessary. - -if (($hrealm ne $REALM) || !$confok) { - print "Rewriting /etc/athena/krb.conf...\n" if $verbose; - - open(KCONF, ">/etc/athena/krb.conf.new") || - die "couldn't open /etc/athena/krb.conf.new: $!\n"; - - print KCONF "$REALM\n"; - print KCONF "$REALM $serverhost admin server\n"; - print KCONF $confs; - - close(KCONF); - - &replace("/etc/athena/krb.conf"); -} - -## parse krb.realms - -if (open(KREALMS, "/etc/athena/krb.realms")) { - $serverrealmok = 0; - $localrealmok = 0; - - while(<KREALMS>) { - $realms .= $_ - if !/^$serverhost\s+$REALM$/oi && !/^$localhost\s+$REALM$/oi; - $serverrealmok = 1 if /^$serverhost\s+$REALM$/oi; - $localrealmok = 1 if /^$localhost\s+$REALM$/oi; - } - - close(KREALMS); -} - -## rewrite krb.realms if necessary. - -if (!$serverrealmok || !$localrealmok) { - print "Rewriting /etc/athean/krb.realms...\n" if $verbose; - - open(KREALMS, ">/etc/athena/krb.realms.new") || - die "couldn't open /etc/athena/krb.realms.new: $!\n"; - - print KREALMS "$serverhost $REALM\n"; - print KREALMS "$localhost $REALM\n" if ($localhost ne $serverhost); - print KREALMS $realms; - - close(KREALMS); - - &replace("/etc/athena/krb.realms"); -} - -# ## read /etc/passwd -# -# open(PASSWD, "/etc/passwd") || die "couldn't open /etc/passwd: $!\n"; -# -# $passok = 0; -# -# if ($archos ne "solaris2.3") { -# %mypass = -# ( -# "root", crypt("testroot","St"), -# "testenc", crypt("notath","HJ"), -# "testuser", "KERBEROS5", -# "pol1", "KERBEROS5", -# "pol2", "KERBEROS5", -# "pol3", "KERBEROS5", -# ); -# } else { -# %mypass = -# ( -# "root", "x", -# "testenc", "x", -# "testuser", "x", -# "pol1", "x", -# "pol2", "x", -# "pol3", "x", -# ); -# %myshadow = -# ( -# "root", crypt("testroot","St"), -# "testenc", crypt("notath","HJ"), -# "testuser", "KERBEROS5", -# "pol1", "KERBEROS5", -# "pol2", "KERBEROS5", -# "pol3", "KERBEROS5", -# ); -# } -# -# $chpw = 0; -# -# while(<PASSWD>) { -# if (/^([^:]+):([^:]+):/ && $mypass{$1}) { -# $users{$1}++; -# if ($2 ne $mypass{$1}) { -# s/^([^:]+):([^:]+):/$1:$mypass{$1}:/; -# $chpw++; -# } -# } -# $pass .= $_; -# } -# -# $passok = 1; -# -# for (keys %mypass) { -# if (!$users{$_}) { -# $pass .= "$_:$mypass{$_}:32765:101::/tmp:/bin/csh\n"; -# $passok = 0; -# } -# } -# close(PASSWD); -# -# ## rewrite passwd if necessary. -# -# if ($chpw || !$passok) { -# print "Rewriting /etc/passwd...\n" if $verbose; -# -# open(PASSWD, ">/etc/passwd.new") || -# die "couldn't open /etc/passwd.new: $!\n"; -# -# print PASSWD $pass; -# -# close(PASSWD); -# -# &replace("/etc/passwd"); -# } -# -# if ($archos eq "solaris2.3") { -# -# ## read /etc/shadow -# -# open(SHADOW, "/etc/shadow") || die "couldn't open /etc/shadow: $!\n"; -# -# $shadowok = 0; -# $chpw = 0; -# %users = (); -# -# while(<SHADOW>) { -# if (/^([^:]+):([^:]+):/ && $myshadow{$1}) { -# $users{$1}++; -# if ($2 ne $myshadow{$1}) { -# s/^([^:]+):([^:]+):/$1:$myshadow{$1}:/; -# $chpw++; -# } -# } -# $shadow .= $_; -# } -# -# $shadowok = 1; -# -# for (keys %myshadow) { -# if (!$users{$_}) { -# $shadow .= "$_:$myshadow{$_}:6445::::::\n"; -# $shadowok = 0; -# } -# } -# close(SHADOW); -# -# ## rewrite shadow if necessary. -# -# if ($chpw || !$shadowok) { -# print "Rewriting /etc/shadow...\n" if $verbose; -# -# open(SHADOW, ">/etc/shadow.new") || -# die "couldn't open /etc/shadow.new: $!\n"; -# -# print SHADOW $shadow; -# -# close(SHADOW); -# -# &replace("/etc/shadow"); -# } -# } -# -# if ($archos eq "aix3.2") { -# -# ## read /etc/security/passwd -# -# open(SHADOW, "/etc/security/passwd") || die "couldn't open /etc/security/passwd: $!\n"; -# -# $shadowok = 0; -# %users = (); -# -# while(<SHADOW>) { -# if (/^([^:]+):\s*$/ && $mypass{$1}) { -# $user = $1; -# $users{$user}++; -# # arrange for the user to have a password entry and none other -# while (<SHADOW>) { -# last if (!/=/); -# } -# $shadow .= "$user:\n\tpassword = KERBEROS5\n\n"; -# } else { -# $shadow .= $_; -# } -# } -# -# $shadowok = 1; -# -# for (keys %mypass) { -# if (!$users{$_}) { -# $shadow .= "$_:\n\tpassword = KERBEROS5\n\n"; -# $shadowok = 0; -# } -# } -# close(SHADOW); -# -# ## rewrite shadow if necessary. -# -# if (!$shadowok) { -# print "Rewriting /etc/security/passwd...\n" if $verbose; -# -# open(SHADOW, ">/etc/security/passwd.new") || -# die "couldn't open /etc/security/passwd.new: $!\n"; -# -# print SHADOW $shadow; -# -# close(SHADOW); -# -# &replace("/etc/security/passwd"); -# } -# } -# -# open(SERVICES, "/etc/services") || die "couldn't open /etc/services: $!\n"; -# open(NEW_SERVICES, ">/etc/services.new") || -# die "couldn't open /etc/services.new: $!\n"; -# -# print "Rewriting /etc/services...\n" if $verbose; -# -# @needed_services = ('klogin', 'kshell', 'kerberos', 'kerberos-sec', -# 'kerberos5', 'kerberos4', 'kerberos_master', -# 'passwd_server', 'eklogin', 'krb5_prop', -# 'kerberos_adm', 'kerberos-adm'); -# for (@needed_services) { -# $needed_services{$_}++; -# } -# -# while (<SERVICES>) { -# m/^\s*([^\#\s][^\s]+)/; -# if ($needed_services{$1}) { -# print "+ Commenting out old entry: $1\n" if $verbose; -# print NEW_SERVICES "# $_"; -# } else { -# print NEW_SERVICES $_; -# } -# } -# -# close(SERVICES); -# -# print NEW_SERVICES <<EOF || die "writing to /etc/services.new: $!\n"; -# -# klogin 543/tcp # Kerberos authenticated rlogin -# kshell 544/tcp cmd # and remote shell -# kerberos 88/udp kdc # Kerberos authentication--udp -# kerberos 88/tcp kdc # Kerberos authentication--tcp -# kerberos-sec 750/udp # Kerberos authentication--udp -# kerberos-sec 750/tcp # Kerberos authentication--tcp -# kerberos5 88/udp kdc # Kerberos authentication--udp -# kerberos5 88/tcp kdc # Kerberos authentication--tcp -# kerberos4 750/udp # Kerberos authentication--udp -# kerberos4 750/tcp # Kerberos authentication--tcp -# kerberos_master 751/udp # Kerberos authentication -# kerberos_master 751/tcp # Kerberos authentication -# passwd_server 752/udp # Kerberos passwd server -# eklogin 2105/tcp # Kerberos encrypted rlogin -# krb5_prop 754/tcp # Kerberos slave propagation -# kerberos_adm 752/tcp # Kerberos 5 admin/changepw -# kerberos-adm 752/tcp # Kerberos 5 admin/changepw -# EOF -# -# close(NEW_SERVICES) || die "error closing /etc/services.new: $!\n"; -# -# rename("/etc/services", "/etc/services.old") || -# die "couldn't rename /etc/services to /etc/services.old: $!\n"; -# rename("/etc/services.new", "/etc/services") || -# die "couldn't rename /etc/services.new to /etc/services: $!\n"; -# unlink("/etc/services.old") || die "couldn't unlink /etc/services: $!\n"; -# |
