$ cd /tmp/
$ sh stage1.sh test
100% complete
Bootstrap succeeded.
$ echo $SHELL
/bin/bash
$ . ups/etc/setups.sh
$ setup upd
$ upd install -G -c kerberos
informational: perl v5_005 already exists on local node, skipping.
informational: installed gtools v2_2.
***********************************************************************
  You should login as root and execute the command
             ups installAsRoot krb5conf v0_6a
  on each node using this copy of krb5conf to complete the installation.
  (This will happen automatically as part of the kerberos installation).
  You will need to be able to write into the /etc directory.
***********************************************************************
informational: installed krb5conf v0_6a.
informational: installed kcommon v1_0.
informational: installed kcroninit v0_6.
***********************************************************************
  You should login as root and execute the command
             ups install kerberos v0_6
  (or one of the other similar kerberos installation commands)
  on each node using this copy of kerberos to complete the installation.
  See the README.INSTALL file for documentation on the installation
options.
***********************************************************************
***********************************************************************
  You should login as root and execute the command
             ups install kerberos v0_6
  (or one of the other similar kerberos installation commands)
  on each node using this copy of kerberos to complete the installation.
  See the README.INSTALL file for documentation on the installation
options.
***********************************************************************
informational: installed kerberos v0_6.
informational: product gtools has an INSTALL_NOTE;
        you should read
/tmp/ups/prd/gtools/v2_2/Linux-2/ups/INSTALL_NOTE.
informational: product kerberos has an INSTALL_NOTE;
        you should read
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/ups/INSTALL_NOTE.
upd install succeeded.

$ su
Password:
root$ echo $SHELL
/bin/tcsh
root$ source ups/etc/setups.csh
root$ ups install-keep-ssh kerberos
Beginning installation of kerberos v0_6
into /usr/krb5.
Do you have the passwords to enable
 the ftp and host services? (y/n, default y) n
You must have the passwords in order to enable the ftp and host
services.
Preparing to configure krb5conf on this node...
        Beginning installation of krb5conf v0_6a on kcdf1.
        No previous /etc/krb5.conf exists, create initial version...
        Logging the installation in
/tmp/ups/prd/krb5conf/v0_6a/NULL/ups/kcdf1.l
og...

        Reminder!!!!
        You must perform this installation on each node
        that shares this copy of krb5conf.

        Installation of krb5conf v0_6a (without afs) on kcdf1 complete.
krb5conf configuration complete.
Preparing to configure service/byname on this node...
        Reading template file
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/ups/services.
template...
        Updating /etc/services file...
        Saving backup copy of /etc/services...
service/byname configuration complete.
Preparing to configure host keys on this node...
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/./sbin/kadmin: option requires an
argument
-- w
Usage: kadmin [-r realm] [-p principal] [-q query] [clnt|local args]
        clnt args: [-s admin_server[:port]] [[-c ccache]|[-k [-t
keytab]]]
        local args: [-d dbname] [-e "enc:salt ..."] [-m]
ERROR: could not add principal ftp/kcdf1.fnal.gov to keytab file.
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/./sbin/kadmin: option requires an
argument
-- w
Usage: kadmin [-r realm] [-p principal] [-q query] [clnt|local args]
        clnt args: [-s admin_server[:port]] [[-c ccache]|[-k [-t
keytab]]]
        local args: [-d dbname] [-e "enc:salt ..."] [-m]
ERROR: could not add principal host/kcdf1.fnal.gov to keytab file.
Preparing to configure inetd on this node...
        Reading template file
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/ups/inetd.con
f.template...
        Updating /etc/inetd.conf file...
        Saving backup copy of /etc/inetd.conf...
        Sending HUP to inetd...
        Sorry, I can't find the inetd process.  You'll have to restart
it by han
d via 'kill -HUP'.
inetd configuration complete.
Preparing to reconfigure sshd on this node...
        Reading template file
/tmp/ups/prd/kerberos/v0_6/Linux-2-2/ups/sshd_conf
ig.weak.template...
        Updating /etc/sshd_config file...
        No changes to /etc/sshd_config are required.
sshd configuration complete.

Automated installation of kerberos complete.

IMPORTANT:
         1) /etc/krb5.keytab configuration of service
            "ftp/kcdf1.fnal.gov" was not completed successfully.
         2) /etc/krb5.keytab configuration of service
            "host/kcdf1.fnal.gov" was not completed successfully.
         3) inetd daemon 'kill -HUP' was not completed successfully.

These steps should be performed for a complete installation of kerberos.
 
Optional: you may choose to replace /bin/login with the kerberized
version via:
          ups install-login kerberos
(not necessary on IRIX platforms).
root$ exit
exit

$ export PATH=/usr/krb5/bin:$PATH
$ kinit
Password for user@PILOT.FNAL.GOV:
kinit: Preauthentication failed while getting initial credentials
$ kinit
Password for user@PILOT.FNAL.GOV:
kinit: Preauthentication failed while getting initial credentials
$ date
Tue Nov 21 11:23:14 CST 2000
$ kinit
Password for user@PILOT.FNAL.GOV:
$ telnet fcdfsgi2
Trying 131.225.240.129...
Connected to fcdfsgi2.fnal.gov (131.225.240.129).
Escape character is '^]'.

                              NOTICE TO USERS

       This  is a Federal computer (and/or it is directly connected to a
       Fermilab local network system) that is the property of the United
       States Government.  It is for authorized use only.  Users (autho-
       rized or unauthorized) have no explicit or  implicit  expectation
       of privacy.

       Any  or  all uses of this system and all files on this system may
       be intercepted, monitored, recorded,  copied, audited, inspected,
       and  disclosed  to authorized site, Department of Energy  and law
       enforcement personnel, as  well as authorized officials of  other
       agencies,  both  domestic and foreign.  By using this system, the
       user consents to such interception, monitoring, recording,  copy-
       ing,  auditing,  inspection,  and disclosure at the discretion of
       authorized site or Department of Energy personnel.

       Unauthorized or improper use of this system may result in  admin-
       istrative  disciplinary  action and civil and criminal penalties.
       By continuing to use this system you indicate your  awareness  of
       and  consent to these terms and conditions of use.  LOG OFF IMME-
       DIATELY if you do not agree to  the  conditions  stated  in  this
       warning.

       Fermilab  policy  and  rules for computing, including appropriate
       use, may be found at http://www.fnal.gov/cd/main/cpolicy.html


[ Kerberos V5 accepts you as ``user@PILOT.FNAL.GOV'' ]
[ Kerberos V5 accepted forwarded credentials ]

                              NOTICE TO USERS

       This  is a Federal computer (and/or it is directly connected to a
       Fermilab local network system) that is the property of the United
       States Government.  It is for authorized use only.  Users (autho-
       rized or unauthorized) have no explicit or  implicit  expectation
       of privacy.

       Any  or  all uses of this system and all files on this system may
       be intercepted, monitored, recorded,  copied, audited, inspected,
       and  disclosed  to authorized site, Department of Energy  and law
       enforcement personnel, as  well as authorized officials of  other
       agencies,  both  domestic and foreign.  By using this system, the
       user consents to such interception, monitoring, recording,  copy-
       ing,  auditing,  inspection,  and disclosure at the discretion of
       authorized site or Department of Energy personnel.

       Unauthorized or improper use of this system may result in  admin-
       istrative  disciplinary  action and civil and criminal penalties.
       By continuing to use this system you indicate your  awareness  of
       and  consent to these terms and conditions of use.  LOG OFF IMME-
       DIATELY if you do not agree to  the  conditions  stated  in  this
       warning.

       Fermilab  policy  and  rules for computing, including appropriate
       use, may be found at http://www.fnal.gov/cd/main/cpolicy.html
 

Terminal type is xterm
There are no available articles.
[fcdfsgi2]