Fedora People

XIDependentDevice · Open Advice

# echo 'cttyhack="yes"' > /etc/dracut.conf.d/cttyhack.conf
# dracut -f
# mkdir ~/efiboot
# cd ~/efiboot/
# wget 'http://downloads.sourceforge.net/project/edk2/OVMF/OVMF-X64-r11337-alpha.zip'
# unzip OVMF-X64-r11337-alpha.zip
# mv OVMF.fd bios.bin
# mv CirrusLogic5446.rom vgabios-cirrus.bin
# umount /boot/efi
# umount /boot
# sync; echo 3 > /proc/sys/vm/drop_caches; umount /
# qemu-kvm -L ~/efiboot -m 512 -snapshot -hda /dev/sda -serial stdio
Shell> blk0:
blk0:\> EFI\redhat\grub.efi

rd.shell rd.break console=ttyS0 rd.ctty=ttyS0
dracut Warning: Break before switch_root

Dropping to debug shell.

switch_root:/# 

# mount /boot
# mount /boot/efi
[root@kdc ~]# yum install ypserv
NISDOMAINNAME=EXAMPLE.COM
YPSERV_ARGS="-p 808"
[root@kdc ~]# nisdomain EXAMPLE.COM
[root@kdc ~]# echo "domain EXAMPLE.COM server kdc.example.com" >> /etc/yp.conf
[root@kdc ~]# echo "255.0.0.0 127.0.0.0" >> /var/yp/securenets
[root@kdc ~]# echo "255.255.255.0 192.168.250.0" >> /var/yp/securenets
[root@kdc ~]# /etc/init.d/ypserv start; chkconfig ypserv on
[root@kdc ~]# make -C /var/yp
iptables -N SERVICES
iptables -I INPUT -j SERVICES
iptables -A SERVICES -p tcp --dport 111 -j ACCEPT -m comment --comment "rpc"
iptables -A SERVICES -p udp --dport 111 -j ACCEPT -m comment --comment "rpc"
iptables -A SERVICES -p tcp --dport 808 -j ACCEPT -m comment --comment "nis"
iptables -A SERVICES -p udp --dport 808 -j ACCEPT -m comment --comment "nis"
iptables -A SERVICES -p tcp --dport 88 -j ACCEPT -m comment --comment "kerberos"
iptables -A SERVICES -p udp --dport 88 -j ACCEPT -m comment --comment "kerberos"
iptables -A SERVICES -p udp --dport 464 -j ACCEPT -m comment --comment "kerberos"
iptables -A SERVICES -p tcp --dport 749 -j ACCEPT -m comment --comment "kerberos"
/etc/init.d/iptables save
[root@kdc ~]# yum -y install ntp && chkconfig ntpd on && /etc/init.d/ntpd start
[root@client ~]# yum -y install ntp && chkconfig ntpd on && /etc/init.d/ntpd start
[root@kdc ~]# yum install krb5-server krb5-workstation
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
	kdc = 192.168.250.2:88
	admin_server = 192.168.250.2:749
}
[domain_realm]
kdc.example.com = EXAMPLE.COM
client.example.com = EXAMPLE.COM
[appdefaults]
 pam = {
   validate = true
[realms]
EXAMPLE.COM = {
	master_key_type = des-hmac-sha1
	default_principal_flags = +preauth
}
*/admin@EXAMPLE.COM	    *
kdb5_util create -r EXAMPLE.COM -s
[root@kdc ~]# kadmin.local
kadmin.local:  addprinc root/admin
kadmin.local:  addprinc user1
kadmin.local:  ktadd -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/admin
kadmin.local:  ktadd -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/changepw
kadmin.local:  exit
[root@kdc ~]# /etc/init.d/krb5kdc start; /etc/init.d/kadmin start
[root@kdc ~]# chkconfig krb5kdc on; chkconfig kadmin on
[root@kdc ~]# kadmin.local
kadmin.local:  addprinc -randkey host/kdc.example.com
kadmin.local:  ktadd host/kdc.example.com
[root@client ~]# yum install krb5-workstation
[root@client ~]# kadmin.local
kadmin.local:  addpinc --randkey host/client.example.com
kadmin.local:  ktadd host/kdc.example.com
[root@kdc ~]# useradd user1
[root@kdc ~]# passwd user1
[root@kdc ~]# make -C /var/yp/
[root@client ~]# ypcat -d EXAMPLE.COM -h kdc.example.com passwd | grep user1
user1:$1$sUlSTlCv$riK5El3z8N4y.mi5Fe3Q60:500:500::/home/user1:/bin/bash
[root@kdc ~]# usermod -p '!!' user1

[root@client ~]# ypcat -d EXAMPLE.COM -h kdc.example.com passwd | grep user1
user1:!!:500:500::/home/user1:/bin/bash
[root@client ~]# mkdir /home/user1
[root@client ~]# cp -av /etc/skel/.bash* /home/user1/
[root@client ~]# chown -R user1:user1 /home/user1/
[root@client ~]# ssh user1@localhost
user1@localhost's password:
[user1@client ~]$ whoami
user1
[user1@client ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_500_fCKPnZ
Default principal: user1@EXAMPLE.COM

Valid starting     Expires            Service principal
02/05/12 14:18:53  02/06/12 00:18:53  krbtgt/EXAMPLE.COM@EXAMPLE.COM
	renew until 02/05/12 14:18:53
Feb 05 14:18:53 kdc.example.com krb5kdc[4694](info): AS_REQ (12 etypes {18 17 16 23 1 3 2 11 10 15 12 13}) 192.168.250.3: ISSUE: authtime 1328473133, etypes {rep=16 tkt=16 ses=16}, user1@EXAMPLE.COM for krbtgt/EXAMPLE.COM@EXAMPLE.COM
Feb 05 14:18:53 kdc.example.com krb5kdc[4694](info): TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.250.3: ISSUE: authtime 1328473133, etypes {rep=16 tkt=18 ses=18}, user1@EXAMPLE.COM for host/client.example.com@EXAMPLE.COM

Fedora People

Useful Tips for DevConf Attendants

Goodbye GDM (for the moment)

movie session @ DevConf.cz

Public Board IRC meeting today, and related things.

Debugging dracut on your live EFI System with qemu

The status of free media program in India: A quick update

How Kubuntu Did Not Change

Gimp and CMYK

Führungswechsel bei Fedora

FOSDEM 2012

Tags:

secommunicate is a handy little tool to analyze policy communication

یک زن مدیر پروژه فدورا

Meteo wifi mesh točke

Congratulations to New Fedora Project Leader!

Manners matters.

Multitouch in X - Multitouch-touchpads

Touch event delivery

Legacy in-driver gestures

Transitions, Soapboxes, and the like…

pacemaker cloud and openstack - FOSDEM 2012 presentation

Back from FOSDEM

Short post: FOSDEM 2012

HowTo: Removing BtrFS from a bunch of drives (BOD)

How to add autostart apps to your Fedora Remix

Retrospection to FOSDEM 2012 Brussels, Belgium

Dan Walsh on Twitter @rhatdan

Fosdem 2012 Pictures

Can we use SELinux for debugging of an application?

Birthday calls

Mukti 2012

Social coding

Del 30 de Enero al 5 de Febrero

Small change to semanage login record creation.

Trip to Sastra University – Trichy

The latest Linux tutorials written by me.

A review of Russian Movie Konets Vechnosti (based on The End of Eternity by Issac Asimov):

CUPS 1.6 changes ahead

torsocks ready for review

How I keep track of my bandwidth usage...

Superb Owl

ide3 amarok vs exaile.

Mini FAmSCo Meeting on Fosdem 2012

Teaching and spreading Fedora through videos

What is Fedora Videos?

Will be there a guidelines?

How can I search though so many Videos?

Current Tasks

If I have an idea to share, a video to spread or just want to be part of this project, what should I do?

The Kerberos-hater's guide to installing Kerberos

Live Free or Die in New Hampshire

Libvirt sandbox at FOSDEM 2012

How to start with Puppet (system config management tool): useful links and resources

Links

How to start with Puppet (system config management tool): useful links and resources

Links

Does your FOSS project pass the Stanford Marshmallow Test?

Glances

How to Install Google Chrome in Fedora via yum

GIMP Single Window Mode by default