RE: LDAP SSL Problems (was: service script (/etc/init.d/ldap))

From: Daniel B. Thurman (dant_at_cdkkt.com)
Date: 11/15/05

  • Next message: kevin.kempter_at_dataintellect.com: "Sync a Treo 650 with Fedora Core 3" 
    Date: Mon, 14 Nov 2005 16:42:19 -0800
To: "For users of Fedora Core releases" <fedora-list@redhat.com>

    >From: fedora-list-bounces@redhat.com
    >[mailto:fedora-list-bounces@redhat.com]On Behalf Of Craig White
    >Sent: Monday, November 14, 2005 3:32 PM
    >To: fedora-list@redhat.com
    >Subject: RE: LDAP SSL Problems (was: service script (/etc/init.d/ldap))
    >
    >
    >On Mon, 2005-11-14 at 16:13 -0700, Craig White wrote:
    >
    >> > Another thing, when I was doing kerberos and got it running,
    >> > there is a definite bug in /etc/init.d/ldap, line 74 where
    >> > kinit was not found. The '$' was missing so that it should
    >> > be $kinit and not stand-alone kinit since the script does not
    >> > have the full pathname to kinit.
    >> ----
    >> I don't have access to my FC4 machine at the moment - kinit part
    >> of /etc/init.d/ldap ? Huh?
    >---
    >OK - just got access but I didn't have openldap-servers installed...
    >
    >Installed: openldap-servers.i386 0:2.2.29-1.FC4
    >Dependency Updated: openldap.i386 0:2.2.29-1.FC4 openldap-clients.i386
    >0:2.2.29-1.FC4
    >Complete!
    >[root@localhost ~]# grep kinit /etc/init.d/ldap
    >[root@localhost ~]#
    >
    >I haven't a clue what you are referring to in line 74...
    >
    >Craig
    >
    >

    ok, here is a snippet of the code:

    ===================================================
    function checkkeytab() {
        local user= service= klist= default=
        user="$1"
        service="$2"
        default="${3:-false}"
        if test -x /usr/kerberos/bin/klist ; then
            klist=/usr/kerberos/bin/klist
        elif test -x /usr/bin/klist ; then
            klist=/usr/bin/klist
        fi
        KRB5_KTNAME="${KRB5_KTNAME:-/etc/krb5.keytab}"
        export KRB5_KTNAME
        if test -s "$KRB5_KTNAME" ; then
            if test x"$klist" != x ; then
                if LANG=C klist -k "$KRB5_KTNAME" | tail -n 4 | awk '{print $2}' | grep -q ^"$service"/ ; then
                    if ! testasuser "$user" -r ${KRB5_KTNAME:-/etc/krb5.keytab} ; then
                        true
                    else
                        false
                    fi
                else
    ================================================

    See: if LANG=C klist -k "$KRB5_KTNAME" | tail -n 4 | awk '{print $2}' |
    ===============^^^^^
    s/b ===========$klist

    Dan 

    -- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.362 / Virus Database: 267.13.0/167 - Release Date: 11/11/2005
 
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: kevin.kempter_at_dataintellect.com: "Sync a Treo 650 with Fedora Core 3"

    Relevant Pages