summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorMantas Mikulėnas2022-03-04 07:58:32 +0200
committerMantas Mikulėnas2022-03-04 07:59:37 +0200
commit291fe7a58a33e9d5019a25573e3acbaee5213ca1 (patch)
treed45c4a5e71a47570c425b9fdf4c956cf63e0bd55
parentbddda20ad89565592d84a278bed5a637cd6e0e99 (diff)
downloadaur-291fe7a58a33e9d5019a25573e3acbaee5213ca1.tar.gz
tell k5start to read the client principal name from keytab
Allows it to be used with keytabs that don't match the "guessed default" client principal (which is username@LOCALREALM).
-rw-r--r--.SRCINFO4
-rw-r--r--PKGBUILD4
-rw-r--r--kstart.service4
3 files changed, 7 insertions, 5 deletions
diff --git a/.SRCINFO b/.SRCINFO
index 52fab08a048a..f8f12911698f 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
pkgbase = kstart
pkgdesc = Kerberos kinit supporting AFS and ticket refreshing
pkgver = 4.3
- pkgrel = 6
+ pkgrel = 7
url = https://www.eyrie.org/~eagle/software/kstart/
arch = i686
arch = x86_64
@@ -16,7 +16,7 @@ pkgbase = kstart
sha256sums = 9527702a48789084e314e5c08d4115129467ca7ef25983d7214c9439d31ef2a6
sha256sums = SKIP
sha256sums = a496742d7cb2f00e8714d2b36da6adc09efd8a62e4892572b69b458b6e790a4e
- sha256sums = c8e8f5f247228c9564b00afb76e0d019fd58770d435f4a20479953e0b2ce5613
+ sha256sums = 2730d02cc606c3019540fa907696bfa20b375ff3e1fb273cdb80c7c480b9081b
sha256sums = 514010cea54d80d1d41fe1885dbdd49225e52192be466e88979f91bac37c8022
pkgname = kstart
diff --git a/PKGBUILD b/PKGBUILD
index 05b78d9e0fec..463ed4b7a6df 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
# Maintainer: Mantas Mikulėnas <grawity@gmail.com>
pkgname=kstart
pkgver=4.3
-pkgrel=6
+pkgrel=7
pkgdesc="Kerberos kinit supporting AFS and ticket refreshing"
arch=(i686 x86_64)
url="https://www.eyrie.org/~eagle/software/kstart/"
@@ -15,7 +15,7 @@ source=("https://archives.eyrie.org/software/kerberos/$pkgname-$pkgver.tar.gz"
sha256sums=('9527702a48789084e314e5c08d4115129467ca7ef25983d7214c9439d31ef2a6'
'SKIP'
'a496742d7cb2f00e8714d2b36da6adc09efd8a62e4892572b69b458b6e790a4e'
- 'c8e8f5f247228c9564b00afb76e0d019fd58770d435f4a20479953e0b2ce5613'
+ '2730d02cc606c3019540fa907696bfa20b375ff3e1fb273cdb80c7c480b9081b'
'514010cea54d80d1d41fe1885dbdd49225e52192be466e88979f91bac37c8022')
validpgpkeys=('E784364E8DDE7BB370FBD9EAD15D313882004173')
diff --git a/kstart.service b/kstart.service
index ca3777eba3b9..a5c2ffd4b0a7 100644
--- a/kstart.service
+++ b/kstart.service
@@ -3,10 +3,12 @@ Description=Kerberos Ticket Acquisition Daemon
[Service]
Type=forking
-ExecStart=/usr/bin/k5start -K30 -a -H30 -f $KEYTAB -t -b -L
+ExecStart=/usr/bin/k5start -K30 -a -H30 -f $KEYTAB -U -t -b -L
# -K30 Run forever, wake up every 30 min
# -a With -K, renew on every wakeup regardless of lifetime
# -H30 With -K, renew if less than 30 min left (default 2 min)
+# -f Use keytab to acquire initial tickets
+# -U Read client principal name from keytab
# -t Run $AKLOG after every renewal (for OpenAFS)
# -b Detach on startup (only if -f keytab is specified)
# -L Log to syslog