diff options
| author | Mantas Mikulėnas | 2022-02-22 20:49:38 +0200 |
|---|---|---|
| committer | Mantas Mikulėnas | 2022-02-22 20:52:30 +0200 |
| commit | 32f82416a950055ceac6d66d8f85144e0404cb90 (patch) | |
| tree | 991f2ab20ce687407af10ec28721be616a3eda4e | |
| parent | 815ae7fe6643297f6b73abdf7b2d815d17155750 (diff) | |
| download | aur-32f82416a950055ceac6d66d8f85144e0404cb90.tar.gz | |
add kstart.service
Keeping the credentials in a keytab is a bit insecure, but... eh, it's
on LUKS and it's better than nothing, so I'll use it while GNOME Online
Accounts' Kerberos support remains broken. [1][2]
[2]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/28
[1]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/160
| -rw-r--r-- | .SRCINFO | 6 | ||||
| -rw-r--r-- | PKGBUILD | 9 | ||||
| -rw-r--r-- | krenew.service | 7 | ||||
| -rw-r--r-- | kstart.service | 20 |
4 files changed, 34 insertions, 8 deletions
@@ -1,7 +1,7 @@ pkgbase = kstart pkgdesc = Kerberos kinit supporting AFS and ticket refreshing pkgver = 4.3 - pkgrel = 1 + pkgrel = 2 url = https://www.eyrie.org/~eagle/software/kstart/ arch = i686 arch = x86_64 @@ -10,9 +10,11 @@ pkgbase = kstart source = https://archives.eyrie.org/software/kerberos/kstart-4.3.tar.gz source = https://archives.eyrie.org/software/kerberos/kstart-4.3.tar.gz.asc source = krenew.service + source = kstart.service validpgpkeys = E784364E8DDE7BB370FBD9EAD15D313882004173 sha256sums = 9527702a48789084e314e5c08d4115129467ca7ef25983d7214c9439d31ef2a6 sha256sums = SKIP - sha256sums = ca57afd39be992371d1008f3ac5058e1bdec537358643f32fbc13e813e007506 + sha256sums = 09189067c7f7e91af3255684b94e31f7c1eb5ba3b7080eb98f7c5d1ef6cecaa9 + sha256sums = 3b39d9c9efc1dd568c14e97b060f22d52d3de90e8ce552f521aefe33ecab02df pkgname = kstart @@ -1,7 +1,7 @@ # Maintainer: Mantas Mikulėnas <grawity@gmail.com> pkgname=kstart pkgver=4.3 -pkgrel=1 +pkgrel=2 pkgdesc="Kerberos kinit supporting AFS and ticket refreshing" arch=(i686 x86_64) url="https://www.eyrie.org/~eagle/software/kstart/" @@ -9,10 +9,12 @@ license=(custom) depends=(krb5) source=("https://archives.eyrie.org/software/kerberos/$pkgname-$pkgver.tar.gz" "https://archives.eyrie.org/software/kerberos/$pkgname-$pkgver.tar.gz.asc" - "krenew.service") + "krenew.service" + "kstart.service") sha256sums=('9527702a48789084e314e5c08d4115129467ca7ef25983d7214c9439d31ef2a6' 'SKIP' - 'ca57afd39be992371d1008f3ac5058e1bdec537358643f32fbc13e813e007506') + '09189067c7f7e91af3255684b94e31f7c1eb5ba3b7080eb98f7c5d1ef6cecaa9' + '3b39d9c9efc1dd568c14e97b060f22d52d3de90e8ce552f521aefe33ecab02df') validpgpkeys=('E784364E8DDE7BB370FBD9EAD15D313882004173') build() { @@ -28,6 +30,7 @@ package() { cd "$srcdir" install -Dm644 krenew.service "$pkgdir/usr/lib/systemd/user/krenew.service" + install -Dm644 kstart.service "$pkgdir/usr/lib/systemd/user/kstart.service" } # vim: ts=2:sw=2:et:ft=sh diff --git a/krenew.service b/krenew.service index 1a188afdeee1..e3e982506d82 100644 --- a/krenew.service +++ b/krenew.service @@ -1,4 +1,3 @@ -# vim: ft=systemd [Unit] Description=Kerberos Ticket Renewal Daemon @@ -6,8 +5,8 @@ Description=Kerberos Ticket Renewal Daemon Type=forking ExecStart=/usr/bin/krenew -K30 -a -H30 -i -b -L # -K30 Run forever, wake up every 30 min -# -a Renew on every wakeup -# -H30 Only renew if less than 30 min +# -a With -K, renew on every wakeup regardless of lifetime +# -H30 With -K, renew if less than 30 min left (default 2 min) # -i Don't exit if renewal fails # -b Detach on startup # -L Log to syslog @@ -17,3 +16,5 @@ StandardOutput=null [Install] WantedBy=default.target + +# vim: ft=systemd diff --git a/kstart.service b/kstart.service new file mode 100644 index 000000000000..dcbaab451d54 --- /dev/null +++ b/kstart.service @@ -0,0 +1,20 @@ +[Unit] +Description=Kerberos Ticket Acquisition Daemon + +[Service] +Type=forking +Environment=KEYTAB=%h/.config/default.keytab +ExecStart=/usr/bin/k5start -K30 -a -H30 -f $KEYTAB -b -L +# -K30 Run forever, wake up every 30 min +# -a With -K, renew on every wakeup regardless of lifetime +# -H30 With -K, renew if less than 30 min left (default 2 min) +# -b Detach on startup (only if -f keytab is specified) +# -L Log to syslog +# -v Be verbose +ExecReload=/bin/kill -s ALRM $MAINPID +StandardOutput=null + +[Install] +WantedBy=default.target + +# vim: ft=systemd |