- Thu Jun 5 2014 Olga Terlyga <terlyga@fnal.gov> 4.8-1
- Update krb5.conf to v4.8 adding kdc to PILOT realm
- Added i-krb-22 and added pilot KDCs t domain-realm section - Wed Jul 3 2013 Frank Nagy <nagy@fnal.gov> 4.7-1
- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default - Sat Jan 5 2013 Frank Nagy <nagy@fnal.gov> 4.6-1
- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account. - Tue Oct 2 2012 Frank Nagy <nagy@fnal.gov> 4.5-2
- Update version number in config-krb5.conf script
- Tue Oct 2 2012 Frank Nagy <nagy@fnal.gov> 4.5-1
- Added Nova Far Detector KDC to search list, edit and re-format
- SysAdmin HowTo instructions for a local KDC search list and
- set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
- each other so only one gets installed - Fri Feb 10 2012 Frank Nagy <nagy@fnal.gov> 4.4-2
- Correctted version number in config-krb5.conf
- Thu Feb 9 2012 Frank Nagy <nagy@fnal.gov> 4.4-1
- Correct spellings and phrasing in this file, config-xinetd and
- config-services. Fixed order of paramter statements in the
- [capaths] section of v4.4 of krb5.conf - Fri Oct 21 2011 Frank Nagy <nagy@fnal.gov> 4.3-1
- V4.2 added PSC.EDU and EXTENCI.ORG realms to the [realms] section
- and V4.3 changed the KDC defintions for the CERN.CN realm - Wed Jun 29 2011 Frank Nagy <nagy@fnal.gov> 4.1-2
- Fixed typo in KDC saerch names (d0online)
- Wed Jun 8 2011 Frank Nagy <nagy@fnal.gov> 4.1-1
- Added permitted_enctypes line to [libdefaults] section
- Removed obsolete AD nodes from [domain_realms] - Wed Jun 1 2011 Frank Nagy <nagy@fnal.gov> 4.0-1
- Changed to krb5.conf V4.0 with expanded KDC list, removed
- Kerberos4 ticket generation from login/pam sections and
- other minor changes. - Tue Dec 28 2010 Troy Dawson <dawson@fnal.gov> 3.1-3
- Changed Copyrite to License in spec file
- Changed PreReq to Requires in spec file - Fri Sep 17 2010 Frank Nagy <nagy@fnal.gov> 3.1-2
- Remove iginore_afs = true line from pam section
- Fri Sep 17 2010 Frank Nagy <nagy@fnal.gov> 3.1-1
- Emergency fix due to PAM mishandling comments on lines
- in [appdefults]pam section causing long login times - Sat Aug 21 2010 Frank Nagy <nagy@fnal.gov> 3.0-4
- Correct some errors in krb5.conf and the config-krb5.conf scipt to
- get the editted comments correct during installation - Sat Aug 21 2010 Frank Nagy <nagy@fnal.gov> 3.0-3
- Correct some minor errors in the krb5.conf in the package
- Sat Aug 21 2010 Frank Nagy <nagy@fnal.gov> 3.0-2
- Correct missing KDC_LOCAL_FILE definitiions in config-krb5.conf script
- Fri Aug 20 2010 Frank Nagy <nagy@fnal.gov> 3.0-1
- Installation scripts modified to drop obsolete edits and support
- local saved FNAL.GOV KDC list
- Added 3DEC to default encoding types and allow Wek Encryption in
- [libdefaults] addded commented tag linges around FNAL.GOV KDC list - Sat Feb 20 2010 Frank Nagy <nagy@fnal.gov> 2.14-1
- Added mappings for Windows file servers to [domain_realm] section
- Thu Jan 7 2010 Frank Nagy <nagy@fnal.gov> 2.13-1
- Added entries to [domain_realm] section of krb5.conf for AD
- Fri Oct 16 2009 Frank Nagy <nagy@fnal.gov> 2.12-7
- If /etc/xinetd.d/ekrb5-telnet file found, replace the ftp and telnet
- template files in config/ (both .xinetd and .xinetd.on files) with
- the gssftp and ekrb-telnet (encrypted telnet only) templates with
- modern server options - Thu Oct 8 2009 Frank Nagy <nagy@fnal.gov> 2.12-6
- Changed to require krb5-workstation instread of krb5-workstation-fermi and to
- obsolete previous versions of this RPM so file replacements will work correctly - Fri Sep 11 2009 Frank Nagy <nagy@fnal.gov> 2.12-4
- Added make-cron-keytab script and fixed makehostkeys permissions
- Duplicated following changes by Troy Dawson from 12.2-1 RPM for SLF5
- Added the triggerin for krb5-libs, updating krb5.conf if EXAMPLE is in the file - Tue Jul 14 2009 Frank Nagy <nagy@fnal.gov> 2.12-4
- Release 3 did not work so use %attr in the %files section
- Tue Jul 14 2009 Frank Nagy <nagy@fnal.gov> 2.12-3
- Explicitly set file owner on install command
- Sat Jul 11 2009 Frank Nagy <nagy@fnal.gov> 2.12-2
- Corrected file owner in tarball to root:root
- Thu Jul 9 2009 Frank Nagy <nagy@fnal.gov> 2.12-1
- Updated to V 2.12 of krb5.conf; added FERMITEST domain definitions and mappings
- Tue Jun 9 2009 Frank Nagy <nagy@fnal.gov) 2.11-1
- Updated to version 2.11 of krb5.conf
- Sat Jun 28 2008 Troy Dawson <dawson@fnal.gov> 2.8-1
- Updated to version 2.8
- kept the ignore_afs change - Fri Oct 26 2007 Troy Dawson <dawson@fnal.gov> 2.7a-1
- Removed the "ignore_afs = true" from the pam section
- Tue Aug 28 2007 Troy Dawson <dawson@fnal.gov> 2.7.1
- Updated to krb5.conf 2.7 - fixing cryptocard problems
- Thu Aug 9 2007 Troy Dawson <dawson@fnal.gov> 2.5-4
- Made it generic, to work with both SLF3 and SLF4
- Thu Aug 9 2007 Troy Dawson <dawson@fnal.gov> 2.5-3
- Updated the name to match the krb5.conf version - 2.5
- updated the config script to say 2.5
- Made it so that it moves the old krb5.conf out of the way - Tue Jul 3 2007 Troy Dawson <dawson@fnal.gov> 1.25-1.LTS4
- updated the krb5.conf.template file to version 1.25
- Changed makekeys so that it finds the right kadmin - Thu Jun 28 2007 Troy Dawson <dawson@fnal.gov> 1.24a-1.LTS4
- updated the krb5.conf.template file to version 1.24a
- Wed Oct 4 2006 Troy Dawson <dawson@fnal.gov> 1.16-1.LTS4
- updated the krb5.conf.template file to version 1.16
- Fri Sep 1 2006 Troy Dawson <dawson@fnal.gov> 1.15-1.LTS4
- updated the krb5.conf.template file to version 1.15
- Sat Aug 6 2005 Troy Dawson <dawson@fnal.gov> 1.10-1.LTS4
- updated the krb5.conf.template file to version 1.10
- Wed Nov 3 2004 Troy Dawson <dawson@fnal.gov> 1.9-4.LTS
- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog
- added triggers to run config-krb5.conf.aklog with AFS triggers - Sat Oct 2 2004 Troy Dawson <dawson@fnal.gov> 1.9-3.LTS
- fixed script that says it's 1.8a
- made the rpm a noarch - Wed Sep 29 2004 Troy Dawson <dawson@fnal.gov> 1.9-1.LTS
- updated to 1.9
- Wed Apr 7 2004 Troy Dawson <dawson@fnal.gov>
- added .sdsc.edu to the FNAL.GOV realm
- Wed Apr 7 2004 Troy Dawson <dawson@fnal.gov>
- added .sdsc.edu to the FNAL.GOV realm
- Sat Apr 3 2004 Troy Dawson <dawson@fnal.gov>
- Changed krb5.conf.template to put PAM section at top.
- Tue Feb 10 2004 Troy Dawson <dawson@fnal.gov>
- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to. - Sat Jan 17 2004 Troy Dawson <dawson@fnal.gov>
- Updated to krb5conf 1.8a
- Wed Nov 12 2003 Troy Dawson <dawson@fnal.gov>
- Put back in the krb.conf, but with proper settings, and triggers
- Sun Oct 5 2003 Troy Dawson <dawson@fnal.gov>
- Cleaned out krb.conf so it quits messing things up.
- Sun Oct 5 2003 Troy Dawson <dawson@fnal.gov>
- Converted to krb5conf 1.7. I had missed a few things the first time
- Fri Sep 26 2003 Troy Dawson <dawson@fnal.gov>
- Added triggers for the xinetd configs
- Tue Apr 8 2003 Troy Dawson <dawson@fnal.gov>
- Took out the check that took krb.conf completely out.
- Thu Apr 3 2003 Troy Dawson <dawson@fnal.gov>
- Took /etc/krb.conf out
- Sat Aug 10 2002 Troy Dawson <dawson@fnal.gov>
- Changed the requires, put in a check before it does ssh config
- Sat May 25 2002 Troy Dawson <dawson@fnal.gov>
- Fixed a bug in the krb5.conf template (removed two 4's)
- Wed May 8 2002 Troy Dawson <dawson@fnal.gov>
- Made changes to the config xinetd script
- Tue May 7 2002 Troy Dawson <dawson@fnal.gov>
- Configured to use the krb5conf v1_6 stuff
- Fri Oct 26 2001 Troy Dawson <dawson@fnal.gov>
- Changed spec file so that it moves the /etc/krb5.conf file
- Fri Oct 26 2001 Troy Dawson <dawson@fnal.gov>
- Changed the krb5.conf.template file so that the Pam part was first,
also lengthened ticket time
- Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file - Wed Oct 3 2001 Troy Dawson <dawson@fnal.gov>
- Made changes for pam usage in krb.conf and krb5.conf
- Also removed the linking of /usr/krb5 and /usr/kerberos - Tue Aug 28 2001 Troy Dawson <dawson@fnal.gov>
- Upgraded from krb5conf 1.5. Also put in changes for xinetd.
- Wed Jun 13 2001 Troy Dawson <dawson@fnal.gov>
- Made improvements to the makehostkeys script. I also have it check
for the varias files (sshd_config, services) before modifying them. - Wed Jun 6 2001 Troy Dawson <dawson@fnal.gov>
- The config-inetd.conf script has been changed to look for services
that have a kerberos equal. If these services were originally turned
off, then the kerberized version is turned off. I also took out the
keytab-convert program, as this is dependant on one particular flavor
of fermi kerberos. - Wed May 23 2001 Troy Dawson <dawson@fnal.gov>
- I added the keytab-convert program into the config rpm, with it's
corresponding manpage. It will also be in the normal kerberos rpm
but in the bin area. - Tue May 22 2001 Troy Dawson <dawson@fnal.gov>
- I changed things to the version 1.4. I also added the config-sshd_config
script, as well as the config-hostkeys script. - Thu May 10 2001 Troy Dawson <dawson@fnal.gov>
- I finished with the config-services and config-inetd.conf scripts.
I also changed how the /usr/krb5 and /usr/kerberos were linked. - Thu May 3 2001 Troy Dawson <dawson@fnal.gov>
- I put the raw scripts into the package from Fermi. These will
need to be rewritten so that they don't depend on Fermi packages.
