#
#  $Header: /sdsc/admin/refsys/Data/cfengine/RCS/cf.kdc,v 1.5 2000/03/09 22:17:57 jeff Exp $
#directories:
# for some reason, cfengine doesn't like our $(owner) and $(group) constructs
# in the directories class
#
# Note that this file uses base_images_arch for everything, even man pages,
# as keeping them separate seems to be more trouble than its worth.
#

directories:
	/var/krb5kdc		m=02755 o=0 g=0
	/usr/sdsc/var		m=02755 o=0 g=0

links:
	/usr/sdsc/var/krb5kdc	-> /var/krb5kdc		# for backwards compatibility with old K5 installations

	/etc/rc2.d/S79krb5.kdc	-> /etc/init.d/krb5.kdc


copy:
	$(common)/var/krb5kdc/kpropd.acl
		dest=/var/krb5kdc/kpropd.acl
		m=0600 o=0 g=0 type=checksum

	$(common)/var/krb5kdc/kdc.conf
		dest=/var/krb5kdc/kdc.conf
		m=0600 o=0 g=0 type=checksum

	$(base_images_arch)/usr/sdsc/etc/krb5kdc
		dest=/usr/sdsc/etc/krb5kdc
		m=0755 o=0 g=0 type=checksum

	$(base_images_arch)/usr/sdsc/etc/kadmind
		dest=/usr/sdsc/etc/kadmind
		m=0755 o=0 g=0 type=checksum

	$(base_images_arch)/usr/sdsc/etc/kadmin.local
		dest=/usr/sdsc/etc/kadmin.local
		m=0755 o=0 g=0 type=checksum

	$(base_images_arch)/usr/sdsc/etc/kpropd
		dest=/usr/sdsc/etc/kpropd
		m=0755 o=0 g=0 type=checksum

	$(base_images_arch)/usr/sdsc/etc/kdb5_util
		dest=/usr/sdsc/etc/kdb5_util
		m=0755 o=0 g=0 type=checksum
	
	$(base_data_arch)/etc/init.d/krb5.kdc dest=/etc/init.d/krb5.kdc
                m=0744 o=0 g=0 type=checksum


editfiles:

    { /etc/inetd.conf
	AppendIfNoSuchLine "krb5_prop stream tcp	nowait	root	/usr/sdsc/etc/tcpd /usr/sdsc/etc/kpropd"
    }
    { /etc/hosts.allow
	PrependIfNoSuchLine "kpropd : ALL: ALLOW"
    }

#files:
#
#    any::
##	don't make ksu suid until we're ready to use it
#	/usr/sdsc/bin/ksu	m=0755 o=$(owner) g=$(group) action=fixall
##	/usr/sdsc/bin/ksu	m=4755 o=$(owner) g=$(group) action=fixall
#
#
#shellcommands:
#
#    exitcommands::
##	restart any daemons that have had config files modified
#	"/sdsc/admin/refsys/Data/cfengine/scripts/restart_daemons krb5-1.0 $(class)"