Author: randy
Date: 2007-01-11 14:42:15 -0700 (Thu, 11 Jan 2007)
New Revision: 6383
Modified:
trunk/BOOK/book/bookinfo.xml
trunk/BOOK/general.ent
trunk/BOOK/introduction/welcome/changelog.xml
trunk/BOOK/introduction/welcome/credits.xml
trunk/BOOK/postlfs/security/mitkrb.xml
Log:
Updated to MIT Kerberos V5-1.6; also overhauled the instructions to fit the
updated version and included enhancements to the instructions
Modified: trunk/BOOK/book/bookinfo.xml
===================================================================
--- trunk/BOOK/book/bookinfo.xml 2007-01-10 05:53:01 UTC (rev 6382)
+++ trunk/BOOK/book/bookinfo.xml 2007-01-11 21:42:15 UTC (rev 6383)
@@ -21,7 +21,7 @@
<copyright id="copyright">
- <year>2001-2006</year>
+ <year>2001-2007</year>
<holder>BLFS Development Team</holder>
</copyright>
Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent 2007-01-10 05:53:01 UTC (rev 6382)
+++ trunk/BOOK/general.ent 2007-01-11 21:42:15 UTC (rev 6383)
@@ -1,8 +1,8 @@
-<!ENTITY day "09"> <!-- Always 2 digits -->
+<!ENTITY day "11"> <!-- Always 2 digits -->
<!ENTITY month "01"> <!-- Always 2 digits -->
<!ENTITY year "2007">
<!ENTITY version "svn-&year;&month;&day;">
-<!ENTITY releasedate "December &day;nd, &year;">
+<!ENTITY releasedate "January &day;th, &year;">
<!ENTITY pubdate "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
<!ENTITY blfs-version "svn"> <!-- svn|[release #] -->
<!ENTITY lfs-version "stable"> <!--
version|stable|testing|unstable|development] -->
@@ -60,7 +60,7 @@
<!ENTITY gnupg-version "1.4.3">
<!ENTITY tripwire-version "2.4.0.1">
<!ENTITY heimdal-version "0.7.2">
-<!ENTITY mitkrb-version "1.4.1">
+<!ENTITY mitkrb-version "1.6">
<!ENTITY cyrus-sasl-version "2.1.21">
<!ENTITY stunnel-version "4.15">
<!ENTITY sudo-version "1.6.8p12">
Modified: trunk/BOOK/introduction/welcome/changelog.xml
===================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml 2007-01-10 05:53:01 UTC
(rev 6382)
+++ trunk/BOOK/introduction/welcome/changelog.xml 2007-01-11 21:42:15 UTC
(rev 6383)
@@ -42,6 +42,17 @@
-->
<listitem>
+ <para>January 11th, 2007</para>
+ <itemizedlist>
+ <listitem>
+ <para>[randy] - Updated to MIT Kerberos V5-1.6. Also overhauled
+ the instructions to fit the updated version and included
+ enhancements to the instructions.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
<para>December 22nd, 2006</para>
<itemizedlist>
<listitem>
Modified: trunk/BOOK/introduction/welcome/credits.xml
===================================================================
--- trunk/BOOK/introduction/welcome/credits.xml 2007-01-10 05:53:01 UTC (rev
6382)
+++ trunk/BOOK/introduction/welcome/credits.xml 2007-01-11 21:42:15 UTC (rev
6383)
@@ -270,7 +270,8 @@
GStreamer Base Plug-ins, GStreamer Good Plug-ins, GStreamer Ugly
Plug-ins, HAL, Heimdal, HTML Tidy, ISO Codes, JadeTeX,
Java Access Bridge, K3b, LessTif (rewrite), libexif, libgail-gnome,
- libgnomecups, Libidn, libmpeg2, libmusicbrainz, libquicktime, MPlayer
+ libgnomecups, Libidn, libmpeg2, libmusicbrainz, libquicktime,
+ MIT Kerberos V5 (many updates and enhancements), MPlayer
(extensive overhaul), NSS, Other Programming Tools, PDL, Perl Modules,
pilot-link, Poppler, PyXML, Samba 3 (many additions), SANE (original
instructions by Alex Kloss), Shadow (rewrite), SLIB, Sound Juicer,
Modified: trunk/BOOK/postlfs/security/mitkrb.xml
===================================================================
--- trunk/BOOK/postlfs/security/mitkrb.xml 2007-01-10 05:53:01 UTC (rev
6382)
+++ trunk/BOOK/postlfs/security/mitkrb.xml 2007-01-11 21:42:15 UTC (rev
6383)
@@ -4,27 +4,15 @@
<!ENTITY % general-entities SYSTEM "../../general.ent">
%general-entities;
- <!-- Inserted as a reminder to do this. The mention of a test suite
- is usually right before the root user installation commands. Please
- delete these 12 (including one blank) lines after you are done.-->
-
- <!-- Use one of the two mentions below about a test suite,
- delete the line that is not applicable. Of course, if the
- test suite uses syntax other than "make check", revise the
- line to reflect the actual syntax to run the test suite -->
-
- <!-- <para>This package does not come with a test suite.</para> -->
- <!-- <para>To test the results, issue: <command>make
check</command>.</para> -->
-
- <!ENTITY mitkrb-download-http
"http://web.mit.edu/kerberos/www/dist/krb5/1.4/krb5-&mitkrb-version;-signed.tar";>
+ <!ENTITY mitkrb-download-http
"http://web.mit.edu/kerberos/www/dist/krb5/1.6/krb5-&mitkrb-version;-signed.tar";>
<!ENTITY mitkrb-download-ftp " ">
- <!ENTITY mitkrb-md5sum "617e0071fa5b74ab4116f064678af551">
- <!ENTITY mitkrb-size "6.4 MB">
- <!ENTITY mitkrb-buildsize "TBD MB">
- <!ENTITY mitkrb-time "TBD SBU">
+ <!ENTITY mitkrb-md5sum "a365e39ff7d39639556c2797a0e1c3f4">
+ <!ENTITY mitkrb-size "12.0 MB">
+ <!ENTITY mitkrb-buildsize "124 MB">
+ <!ENTITY mitkrb-time "1.4 SBU">
]>
-<sect1 id="mitkrb" xreflabel="MIT krb5-&mitkrb-version;">
+<sect1 id="mitkrb" xreflabel="MIT Kerberos V5-&mitkrb-version;">
<?dbhtml filename="mitkrb.html"?>
<sect1info>
@@ -32,17 +20,17 @@
<date>$Date$</date>
</sect1info>
- <title>MIT Krb5-&mitkrb-version;</title>
+ <title>MIT Kerberos V5-&mitkrb-version;</title>
<indexterm zone="mitkrb">
- <primary sortas="a-Kerberos-MIT">Kerberos5(MIT)</primary>
+ <primary sortas="a-MIT-Kerberos">MIT Kerberos V5</primary>
</indexterm>
<sect2 role="package">
- <title>Introduction to MIT Krb5</title>
+ <title>Introduction to MIT Kerberos V5</title>
- <para><application>MIT krb5</application> is a free implementation of
- Kerberos 5. Kerberos is a network authentication protocol. It
+ <para><application>MIT Kerberos V5</application> is a free implementation
+ of Kerberos 5. Kerberos is a network authentication protocol. It
centralizes the authentication database and uses kerberized
applications to work with servers or services that support Kerberos
allowing single logins and encrypted communication over internal
@@ -70,13 +58,13 @@
</listitem>
</itemizedlist>
- <bridgehead renderas="sect3">MIT Krb5 Dependencies</bridgehead>
+ <bridgehead renderas="sect3">MIT Kerberos V5 Dependencies</bridgehead>
<bridgehead renderas="sect4">Optional</bridgehead>
- <para role="optional"><xref linkend="xinetd"/> (services servers only),
- <xref linkend="linux-pam"/> (for <command>xdm</command> based logins) and
- <xref linkend="openldap"/> (alternative for <command>krb5kdc</command>
- password database)</para>
+ <para role="optional"><xref linkend="linux-pam"/>
+ (for <command>xdm</command> based logins),
+ <xref linkend="openldap"/>, and
+ <xref linkend="dejagnu"/> (required to run the test suite)</para>
<note>
<para>Some sort of time synchronization facility on your system (like
@@ -91,52 +79,64 @@
</sect2>
<sect2 role="installation">
- <title>Installation of MIT Krb5</title>
+ <title>Installation of MIT Kerberos V5</title>
-
- <!-- <note><para>The instructions for MIT Krb5 have not yet been validated
by
- the BLFS Editors. Until this section is updated, the Editors reccomend
- using <xref linkend='heimdal'/> to implement the functionality of this
- package.</para></note> -->
-
-
- <para><application>MIT krb5</application> is distributed in a
+ <para><application>MIT Kerberos V5</application> is distributed in a
TAR file containing a compressed TAR package and a detached PGP
- <filename class="extension">ASC</filename> file.</para>
+ <filename class="extension">ASC</filename> file. You'll need to unpack
+ the distribution tar file, then unpack the compressed tar file before
+ starting the build.</para>
- <para>If you have installed <xref linkend="gnupg"/>, you can
+ <para>After unpacking the distribution tarball and if you have
+ <xref linkend="gnupg"/> installed, you can
authenticate the package with the following command:</para>
<screen><userinput>gpg - -verify
krb5-&mitkrb-version;.tar.gz.asc</userinput></screen>
- <para>Build <application>MIT krb5</application> by running the
+ <para>Build <application>MIT Kerberos V5</application> by running the
following commands:</para>
<screen><userinput>cd src &&
-./configure --prefix=/usr --sysconfdir=/etc \
- --localstatedir=/var/lib --enable-dns \
- --enable-static --mandir=/usr/share/man &&
+./configure CPPFLAGS="-I/usr/include/et -I/usr/include/ss" \
+ --prefix=/usr \
+ --sysconfdir=/etc/krb5 \
+ --localstatedir=/var/lib \
+ --with-system-et \
+ --with-system-ss \
+ --enable-dns-for-realm \
+ --mandir=/usr/share/man &&
make</userinput></screen>
+ <para>The regression test suite is designed to be run after the
+ installation has been completed.</para>
+
<para>Now, as the <systemitem class="username">root</systemitem>
user:</para>
<screen role="root"><userinput>make install &&
+
mv -v /usr/bin/ksu /bin &&
+chmod -v 755 /bin/ksu &&
mv -v /usr/lib/libkrb5.so.3* /lib &&
-mv -v /usr/lib/libkrb4.so.2* /lib &&
-mv -v /usr/lib/libdes425.so.3* /lib &&
mv -v /usr/lib/libk5crypto.so.3* /lib &&
-mv -v /usr/lib/libcom_err.so.3* /lib &&
-ln -v -sf ../../lib/libkrb5.so.3 /usr/lib/libkrb5.so &&
-ln -v -sf ../../lib/libkrb4.so.2 /usr/lib/libkrb4.so &&
-ln -v -sf ../../lib/libdes425.so.3 /usr/lib/libdes425.so &&
-ln -v -sf ../../lib/libk5crypto.so.3 /usr/lib/libk5crypto.so &&
-ln -v -sf ../../lib/libcom_err.so.3 /usr/lib/libcom_err.so &&
-ldconfig</userinput></screen>
+mv -v /usr/lib/libkrb5support.so.0* /lib &&
+ln -v -sf ../../lib/libkrb5.so.3.3 /usr/lib/libkrb5.so &&
+ln -v -sf ../../lib/libk5crypto.so.3.1 /usr/lib/libk5crypto.so &&
+ln -v -sf ../../lib/libkrb5support.so.0.1 /usr/lib/libkrb5support.so&&
+
+install -m644 -v ../doc/*.info* /usr/share/info &&
+for INFOFILE in 425 5-admin 5-install 5-user; do
+ install-info --info-dir=/usr/share/info \
+ /usr/share/info/krb$INFOFILE.info
+ rm ../doc/krb$INFOFILE.info*
+done &&
+
+install -m755 -v -d /usr/share/doc/krb5-&mitkrb-version; &&
+cp -Rv ../doc/* /usr/share/doc/krb5-&mitkrb-version;</userinput></screen>
+
<warning>
<para><command>login.krb5</command> does not support
- <application>shadow</application> passwords. As a result, when the
+ <application>Shadow</application> passwords. As a result, when the
Kerberos server is unavailable, the default fall through to
<filename>/etc/password</filename> will not work because
the passwords have been moved to <filename>/etc/shadow</filename> during
@@ -145,13 +145,27 @@
<filename>/etc/password</filename> could prevent any logins.</para>
</warning>
- <para>If <application>Linux-Pam</application> is not installed and
- you understand the above warning, the following can be entered as the
- <systemitem class="username">root</systemitem> user:</para>
+ <para>After considering (and understanding) the above warning, the
+ following commands can be entered as the
+ <systemitem class="username">root</systemitem> user to replace the
+ existing <command>login</command> program with the Kerberized
+ version (after preserving the original) and move the support libraries
+ to a location available when the
+ <filename class='directory'>/usr</filename> filesystem is
+ not mounted:</para>
<screen role="root"><userinput>mv -v /bin/login /bin/login.shadow &&
-cp -v /usr/sbin/login.krb5 /bin/login</userinput></screen>
+install -m755 -v /usr/sbin/login.krb5 /bin/login &&
+mv -v /usr/lib/libdes425.so.3* /lib &&
+mv -v /usr/lib/libkrb4.so.2* /lib &&
+
+ln -v -sf ../../lib/libdes425.so.3.0 /usr/lib/libdes425.so &&
+ln -v -sf ../../lib/libkrb4.so.2.0 /usr/lib/libkrb4.so &&
+
+ldconfig</userinput></screen>
+
+ <!--
<para>If <application>CrackLib</application> is installed, or if any
word list has been put in
<filename class='directory'>/usr/share/dict</filename>, the following
@@ -159,44 +173,65 @@
user:</para>
<screen role="root"><userinput>ln -s /usr/share/dict/words
/var/lib/krb5kdc/kadmin.dict</userinput></screen>
+ -->
+ <para>To test the installation, you must have
+ <xref linkend="dejagnu"/> installed and issue: <command>make
+ check</command>. The RPC layer tests will require a portmap daemon
+ (see <xref linkend="portmap"/>) running and configured to listen on the
+ regular network interface (not localhost). See the <quote>Testing the
+ Build</quote> section of the <filename>krb5-install.html</filename> file
+ in the <filename class='directory'>../doc</filename> directory for complete
+ information on running the regression tests.</para>
+
</sect2>
<sect2 role="commands">
<title>Command Explanations</title>
- <para><parameter>--enable-dns</parameter>: This switch allows
+ <para><parameter>--enable-dns-for-realm</parameter>: This parameter allows
realms to be resolved using the DNS server.</para>
- <para><parameter>--enable-static</parameter>: This switch builds static
- libraries in addition to the shared libraries.</para>
+ <para><parameter>--with-system-et</parameter>: This parameter causes the
+ build to use the system-installed versions of the error-table support
+ software.</para>
- <para><command>mv -v /bin/login /bin/login.shadow &&
- cp -v /usr/sbin/login.krb5 /bin/login &&
- mv -v /usr/bin/ksu /bin</command>: Preserves
- <application>Shadow</application>'s <command>login</command>
- command, moves <command>ksu</command> and <command>login</command> to
- the <filename class="directory">/bin</filename> directory.</para>
+ <para><parameter>--with-system-ss</parameter>: This parameter causes the
+ build to use the system-installed versions of the subsystem command-line
+ interface software.</para>
+ <para><parameter>--localstatedir=/var/lib</parameter>: This parameter is
+ used so that the Kerberos variable run-time data is located in
+ <filename class='directory'>/var/lib</filename> instead of
+ <filename class='directory'>/usr/var</filename>.</para>
+
+ <!-- <para><parameter>- -enable-static</parameter>: This switch builds
static
+ libraries in addition to the shared libraries.</para> -->
+
+ <para><command>mv -v /usr/bin/ksu /bin</command>: Moves the
+ <command>ksu</command> program to the
+ <filename class="directory">/bin</filename> directory so that it is
+ available when the <filename class="directory">/usr</filename>
+ filesystem is not mounted.</para>
+
<para><command>mv -v ... /lib && ln -v -sf ...</command>:
- The <command>login</command> and <command>ksu</command> programs
- are linked against these libraries, therefore these libraries are moved
- to <filename class="directory">/lib</filename> to allow logins without
- mounting <filename class="directory">/usr</filename>.</para>
+ These libraries are moved to <filename class="directory">/lib</filename> so
+ they are available when the <filename class="directory">/usr</filename>
+ filesystem is not mounted.</para>
</sect2>
<sect2 role="configuration">
- <title>Configuring MIT Krb5</title>
+ <title>Configuring MIT Kerberos V5</title>
<sect3 id="krb5-config">
<title>Config Files</title>
- <para><filename>/etc/krb5.conf</filename> and
+ <para><filename>/etc/krb5/krb5.conf</filename> and
<filename>/var/lib/krb5kdc/kdc.conf</filename></para>
<indexterm zone="mitkrb krb5-config">
- <primary sortas="e-etc-krb5.conf">/etc/krb5.conf</primary>
+ <primary sortas="e-etc-krb5-krb5.conf">/etc/krb5/krb5.conf</primary>
</indexterm>
<indexterm zone="mitkrb krb5-config">
@@ -211,11 +246,23 @@
<sect4>
<title>Kerberos Configuration</title>
+ <tip>
+ <para>You should consider installing some sort of password checking
+ dictionary so that you can configure the installation to only
+ accept strong passwords. A suitable dictionary to use is shown in
+ the <xref linkend="cracklib"/> instructions. Note that only one
+ file can be used, but you can concatenate many files into one. The
+ configuration file shown below assumes you have installed a
+ dictionary to <filename>/usr/share/dict/words</filename>.</para>
+ </tip>
+
<para>Create the Kerberos configuration file with the following
- command:</para>
+ commands issued by the <systemitem class="username">root</systemitem>
+ user:</para>
-<screen role="root"><userinput>cat > /etc/krb5.conf << "EOF"
-<literal># Begin /etc/krb5.conf
+<screen role="root"><userinput>install -v -m755 -d /etc/krb5 &&
+cat > /etc/krb5/krb5.conf << "EOF"
+<literal># Begin /etc/krb5/krb5.conf
[libdefaults]
default_realm = <replaceable><LFS.ORG></replaceable>
@@ -225,6 +272,7 @@
<replaceable><LFS.ORG></replaceable> = {
kdc = <replaceable><belgarath.lfs.org></replaceable>
admin_server = <replaceable><belgarath.lfs.org></replaceable>
+ dict_file = /usr/share/dict/words
}
[domain_realm]
@@ -235,7 +283,7 @@
admin_server = SYSLOG[INFO[:AUTH]]
default = SYSLOG[[:SYS]]
-# End /etc/krb5.conf</literal>
+# End /etc/krb5/krb5.conf</literal>
EOF</userinput></screen>
<para>You will need to substitute your domain and proper hostname
@@ -281,7 +329,7 @@
<screen role='root'><userinput><prompt>kadmin:</prompt> ktadd
host/<replaceable><belgarath.lfs.org></replaceable></userinput></screen>
<para>This should have created a file in
- <filename class="directory">/etc</filename> named
+ <filename class="directory">/etc/krb5</filename> named
<filename>krb5.keytab</filename> (Kerberos 5). This file should
have 600 (<systemitem class="username">root</systemitem> rw only)
permissions. Keeping the keytab files from public access is crucial
@@ -317,7 +365,7 @@
following command:</para>
<screen><userinput>ktutil
-<prompt>ktutil:</prompt> rkt /etc/krb5.keytab
+<prompt>ktutil:</prompt> rkt /etc/krb5/krb5.keytab
<prompt>ktutil:</prompt> l</userinput></screen>
<para>This should dump a list of the host principal, along with
@@ -371,7 +419,7 @@
<title>Additional Information</title>
<para>For additional information consult <ulink
- url="http://web.mit.edu/kerberos/www/krb5-1.4/#documentation";>
+ url="http://web.mit.edu/kerberos/www/krb5-1.6/#documentation";>
Documentation for krb-&mitkrb-version;</ulink> on which the above
instructions are based.</para>
@@ -391,16 +439,19 @@
<segtitle>Installed Directories</segtitle>
<seglistitem>
- <seg>compile-et, ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
- kadmin.local, kadmind, kadmind4, kdb5_util, kdestroy, kinit, klist,
- klogind, kpasswd, kprop, kpropd, krb5-send-pr, krb5-config, krb524d,
+ <seg>ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
+ kadmin.local, kadmind, kdb5_ldap_util, kdb5_util, kdestroy, kinit,
klist,
+ klogind, kpasswd, kprop, kpropd, krb5-config, krb5-send-pr, krb524d,
krb524init, krb5kdc, kshd, ksu, ktutil, kvno, login.krb5, rcp, rlogin,
rsh, sclient, sim_client, sim_server, sserver, telnet, telnetd,
- uuclient, uuserver, v5passwd, and v5passwdd</seg>
- <seg>libcom_err.{so,a}, libdes425.{so,a}, libgssapi.{so,a},
- libgssrpc.{so,a}, libkadm5clnt.{so,a}, libkadm5srv.{so,a},
- libkdb5.{so,a}, libkrb5.{so,a}, and libkrb4.{so,a}</seg>
- <seg>/usr/include/kerberosIV and /var/lib/krb5kdc</seg>
+ uuclient, uuserver and v4rcp</seg>
+ <seg>libdes425.so, libgssapi_krb5.so,
+ libgssrpc.so, libk5crypto.so, libkadm5clnt.so, libkadm5srv.so,
+ libkdb5.so, libkdb_ldap.so, libkrb4.so, libkrb5.so and
+ libkrb5support.so</seg>
+ <seg>/etc/krb5, /usr/include/{gssapi,gssrpc,kerberosIV,krb5},
+ /usr/lib/krb5, /usr/share/{doc/krb5-&mitkrb-version;,examples,gnats}
+ and /var/lib/krb5kdc</seg>
</seglistitem>
</segmentedlist>
@@ -409,22 +460,11 @@
<?dbfo list-presentation="list"?>
<?dbhtml list-presentation="table"?>
- <varlistentry id="compile_et">
- <term><command>compile_et</command></term>
- <listitem>
- <para>converts the table listing error-code names into a
- C source file.</para>
- <indexterm zone="mitkrb compile_et">
- <primary sortas="b-compile_et">compile_et</primary>
- </indexterm>
- </listitem>
- </varlistentry>
-
<varlistentry id="ftp-mitkrb">
<term><command>ftp</command></term>
<listitem>
<para>is a kerberized FTP client.</para>
- <indexterm zone="mitkrb ftp">
+ <indexterm zone="mitkrb ftp-mitkrb">
<primary sortas="b-ftp">ftp</primary>
</indexterm>
</listitem>
@@ -434,7 +474,7 @@
<term><command>ftpd</command></term>
<listitem>
<para>is a kerberized FTP daemon.</para>
- <indexterm zone="mitkrb ftpd">
+ <indexterm zone="mitkrb ftpd-mitkrb">
<primary sortas="b-ftpd">ftpd</primary>
</indexterm>
</listitem>
@@ -558,13 +598,13 @@
</listitem>
</varlistentry>
- <varlistentry id="krb5-config-1">
+ <varlistentry id="krb5-config-prog2">
<term><command>krb5-config</command></term>
<listitem>
<para>gives information on how to link programs against
libraries.</para>
- <indexterm zone="mitkrb krb5-config-prog">
- <primary sortas="b-krb5-config-1">krb5-config</primary>
+ <indexterm zone="mitkrb krb5-config-prog2">
+ <primary sortas="b-krb5-config">krb5-config</primary>
</indexterm>
</listitem>
</varlistentry>
@@ -638,7 +678,7 @@
<term><command>rcp</command></term>
<listitem>
<para>is a kerberized rcp client program.</para>
- <indexterm zone="mitkrb rcp">
+ <indexterm zone="mitkrb rcp-mitkrb">
<primary sortas="b-rcp">rcp</primary>
</indexterm>
</listitem>
@@ -658,7 +698,7 @@
<term><command>rsh</command></term>
<listitem>
<para>is a kerberized rsh client program.</para>
- <indexterm zone="mitkrb rsh">
+ <indexterm zone="mitkrb rsh-mitkrb">
<primary sortas="b-rsh">rsh</primary>
</indexterm>
</listitem>
@@ -668,7 +708,7 @@
<term><command>telnet</command></term>
<listitem>
<para>is a kerberized telnet client program.</para>
- <indexterm zone="mitkrb telnet">
+ <indexterm zone="mitkrb telnet-mitkrb">
<primary sortas="b-telnet">telnet</primary>
</indexterm>
</listitem>
@@ -678,75 +718,65 @@
<term><command>telnetd</command></term>
<listitem>
<para>is a kerberized telnet server.</para>
- <indexterm zone="mitkrb telnetd">
+ <indexterm zone="mitkrb telnetd-mitkrb">
<primary sortas="b-telnetd">telnetd</primary>
</indexterm>
</listitem>
</varlistentry>
- <varlistentry id="libcom_err">
- <term><filename class='libraryfile'>libcom_err.{so,a}</filename></term>
+ <varlistentry id="libgssapi_krb5-mitkrb">
+ <term><filename class='libraryfile'>libgssapi_krb5.so</filename></term>
<listitem>
- <para>implements the Kerberos library error code.</para>
- <indexterm zone="mitkrb libcom_err">
- <primary sortas="c-libcom_err">libcom_err.{so,a}</primary>
- </indexterm>
- </listitem>
- </varlistentry>
-
- <varlistentry id="libgssapi-mitkrb">
- <term><filename class='libraryfile'>libgssapi.{so,a}</filename></term>
- <listitem>
<para>contain the Generic Security Service Application
Programming Interface (GSSAPI) functions which provides security
services to callers in a generic fashion, supportable with a range of
underlying mechanisms and technologies and hence allowing
source-level
portability of applications to different environments.</para>
- <indexterm zone="mitkrb libgssapi">
- <primary sortas="c-libgssapi">libgssapi.{so,a}</primary>
+ <indexterm zone="mitkrb libgssapi_krb5-mitkrb">
+ <primary sortas="c-libgssapi_krb5">libgssapi_krb5.so</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libkadm5clnt-mitkrb">
- <term><filename
class='libraryfile'>libkadm5clnt.{so,a}</filename></term>
+ <term><filename class='libraryfile'>libkadm5clnt.so</filename></term>
<listitem>
<para>contains the administrative authentication and password
checking functions required by Kerberos 5 client-side
programs.</para>
- <indexterm zone="mitkrb libkadm5clnt">
- <primary sortas="c-libkadm5clnt">libkadm5clnt.{so,a}</primary>
+ <indexterm zone="mitkrb libkadm5clnt-mitkrb">
+ <primary sortas="c-libkadm5clnt">libkadm5clnt.so</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libkadm5srv-mitkrb">
- <term><filename
class='libraryfile'>libkadm5srv.{so,a}</filename></term>
+ <term><filename class='libraryfile'>libkadm5srv.so</filename></term>
<listitem>
<para>contain the administrative authentication and password
checking functions required by Kerberos 5 servers.</para>
- <indexterm zone="mitkrb libkadm5srv">
- <primary sortas="c-libkadm5srv">libkadm5srv.{so,a}</primary>
+ <indexterm zone="mitkrb libkadm5srv-mitkrb">
+ <primary sortas="c-libkadm5srv">libkadm5srv.so</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libkdb5">
- <term><filename class='libraryfile'>libkdb5.{so,a}</filename></term>
+ <term><filename class='libraryfile'>libkdb5.so</filename></term>
<listitem>
<para>is a Kerberos 5 authentication/authorization database
access library.</para>
<indexterm zone="mitkrb libkdb5">
- <primary sortas="c-libkdb5">libkdb5.{so,a}</primary>
+ <primary sortas="c-libkdb5">libkdb5.so</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libkrb5-mitkrb">
- <term><filename class='libraryfile'>libkrb5.{so,a}</filename></term>
+ <term><filename class='libraryfile'>libkrb5.so</filename></term>
<listitem>
<para>is an all-purpose Kerberos 5 library.</para>
- <indexterm zone="mitkrb libkrb5">
- <primary sortas="c-libkrb5">libkrb5.{so,a}</primary>
+ <indexterm zone="mitkrb libkrb5-mitkrb">
+ <primary sortas="c-libkrb5">libkrb5.so</primary>
</indexterm>
</listitem>
</varlistentry>
--
http://linuxfromscratch.org/mailman/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
