diff options
| author | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2022-01-04 09:14:07 +0100 |
|---|---|---|
| committer | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2022-01-04 09:14:07 +0100 |
| commit | 3b226aa8f0bc475142c438e8748ae390f5db7a37 (patch) | |
| tree | 536c32014f7db7ba3edc36b0f368cdad9b6bcd4a /share/debian-edu-config/tools/gosa-modify-host-itzks | |
| parent | 70b0c193f61d6e8beb47d13b6ff181c4357fe286 (diff) | |
| download | itzks-systems-3b226aa8f0bc475142c438e8748ae390f5db7a37.tar.gz itzks-systems-3b226aa8f0bc475142c438e8748ae390f5db7a37.tar.bz2 itzks-systems-3b226aa8f0bc475142c438e8748ae390f5db7a37.zip | |
mainserver: Provide gosa-*-host hook script extension that collects Krb5 host keytabs of diskless workstation hosts in a separate folder and makes those (theoretically, if used) available to diskless workstations via SSH as unprivileged user.
Diffstat (limited to 'share/debian-edu-config/tools/gosa-modify-host-itzks')
| -rwxr-xr-x | share/debian-edu-config/tools/gosa-modify-host-itzks | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/share/debian-edu-config/tools/gosa-modify-host-itzks b/share/debian-edu-config/tools/gosa-modify-host-itzks index 9d053e6..a79000b 100755 --- a/share/debian-edu-config/tools/gosa-modify-host-itzks +++ b/share/debian-edu-config/tools/gosa-modify-host-itzks @@ -14,6 +14,11 @@ if ! LANG=C kadmin.local -q "get_principal host/$HOST.intern" 2>/dev/null | gre fi +# call DLW keytabs' update script (delay execution for 10s because GOsa² needs +# to write the NIS netgroup information first (this hook gets called between +# saving the host object to LDAP, but before updating the NIS netgroup settings). +( sleep 10; /usr/share/debian-edu-config/tools/update-dlw-krb5-keytabs-itzks ${@} ) & + # ITZkS: assure that host keytabs are readable by puppet chown :puppet /etc/debian-edu/host-keytabs/*.keytab chmod 0640 /etc/debian-edu/host-keytabs/*.keytab |