Changeset 2776

Timestamp:

Dec 24, 2009, 4:45:00 PM (15 years ago)

Author:

gdb

Message:

Added debathena krb and ssh config stuff to invirt-base

Location:

package_branches/invirt-base/hvirt/debian

Files:

• changelog (modified) (1 diff)
• control (modified) (1 diff)
• rules (modified) (1 diff)
• transform_krb5.conf.invirt (added)

package_branches/invirt-base/hvirt/debian/changelog

@@ +1 @@
+invirt-base (0.0.28) unstable; urgency=low
+
+  * Added debathena SSH and KRB5 config
+
+ -- Greg Brockman <gdb@mit.edu>  Thu, 24 Dec 2009 16:30:55 -0500
+
 invirt-base (0.0.27) unstable; urgency=low
 

package_branches/invirt-base/hvirt/debian/control

@@ -3 +3 @@
 Priority: extra
 Maintainer: Invirt project <invirt@mit.edu>
-Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 4.1.0), python-all-dev, python-support, python-setuptools, python-debian, python-apt
+Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 4.1.0), python-all-dev, python-support, python-setuptools, python-debian, python-apt, krb5-config, krb5-user, krb5-clients, openssh-server
 Standards-Version: 3.8.0
 
 Package: invirt-base
 Architecture: all
-Depends: ${python:Depends}, ${misc:Depends},
+Depends: ${python:Depends}, ${shlibs:Depends}, ${misc:Depends},
  python-json (>= 3.4-2), python-yaml (>= 3.05), python-mako (>=
- 0.2.2), remctl-client, invirt-config
-Provides: ${python:Provides}
+ 0.2.2), remctl-client, invirt-config, krb5-config, krb5-user,
+ krb5-clients, openssh-server
+Provides: ${python:Provides}, ${diverted-files}
+Conflicts: ${diverted-files}
 XB-Python-Version: ${python:Versions}
 Description: Base configuration required for all Invirt servers

package_branches/invirt-base/hvirt/debian/rules

@@ -2 +2 @@
 
 DEB_PYTHON_SYSTEM=pysupport
+DEB_DIVERT_EXTENSION = .invirt
+# Stolen from Debathena
+DEB_CHECK_FILES_SOURCE_/etc/krb5.conf.invirt = \
+        /usr/share/kerberos-configs/krb5.conf.template
+DEB_TRANSFORM_FILES_invirt-base += \
+        /etc/krb5.conf.invirt
 
 include /usr/share/cdbs/1/rules/debhelper.mk
 include /usr/share/cdbs/1/class/python-distutils.mk
+include /usr/share/cdbs/1/rules/config-package.mk
 
 binary-fixup/invirt-base::
         mv $(DEB_DESTDIR)usr/bin/invirt-reload $(DEB_DESTDIR)usr/sbin/invirt-reload
 
+# Stolen from Debathena
+debian/sshd_config.invirt-orig: /var/lib/dpkg/info/openssh-server.postinst
+        perl -0pe 's/^.*<<EOF[^\n]*\n(.*\n)EOF\n.*$$/$$1/s or die;' $< > $@
+
+# Stolen from Debathena
+debian/sshd_config.invirt: debian/sshd_config.invirt-orig
+        perl -0pe '# Debathena rules (from debathena-ssh-server-config) \
+s/^#?GSSAPIAuthentication .*$/GSSAPIAuthentication yes\nGSSAPIKeyExchange yes\nGSSAPIStrictAcceptorCheck no/m or die; \
+s/^#?GSSAPICleanupCredentials .*$/GSSAPICleanupCredentials yes/m or die; \
+s/^#?ChallengeResponseAuthentication .*$/ChallengeResponseAuthentication yes/m or die; \
+## In Debathena, privilege separation is configurable. \
+s/^#?UsePrivilegeSeparation .*$/UsePrivilegeSeparation yes/m or die; \
+s/^#?PasswordAuthentication .*$/PasswordAuthentication no/m or die;' $< > $@
+
 clean::
         rm -rf python/invirt.egg-info