updated to reality
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2384 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
48
doc/tut.texi
48
doc/tut.texi
@@ -6,8 +6,22 @@ There currently isn't any documentation other than the source. To give
|
|||||||
some example how to you might try this code, we give you a quick
|
some example how to you might try this code, we give you a quick
|
||||||
`tutorial'.
|
`tutorial'.
|
||||||
|
|
||||||
After you have built everything (don't @samp{make install}) you could do
|
First build everything. You should be able to install it with
|
||||||
the following to test the kdc.
|
@samp{make install} but don't need to. Here are some simple tests to
|
||||||
|
exercise the kdc.
|
||||||
|
|
||||||
|
You will have to create a @file{/etc/krb5.conf} with the following contents:
|
||||||
|
|
||||||
|
@example
|
||||||
|
[realms]
|
||||||
|
MY.REALM = @{
|
||||||
|
kdc = my.computer
|
||||||
|
@}
|
||||||
|
[domain_realm]
|
||||||
|
my.computer = MY.REALM
|
||||||
|
@end example
|
||||||
|
|
||||||
|
And then,
|
||||||
|
|
||||||
@example
|
@example
|
||||||
$ cd kdc
|
$ cd kdc
|
||||||
@@ -22,17 +36,17 @@ Default renewable ticket life: [432000]
|
|||||||
This will create an initial database (in the current directory).
|
This will create an initial database (in the current directory).
|
||||||
|
|
||||||
@example
|
@example
|
||||||
kdb_edit> add me@@MY.REALM
|
kdb_edit> add me
|
||||||
Max ticket life [86400]:
|
Max ticket life [86400]:
|
||||||
Max renewable ticket [432000]:
|
Max renewable ticket [432000]:
|
||||||
Password:
|
Password:
|
||||||
Verifying password - Password:
|
Verifying password - Password:
|
||||||
@end example
|
@end example
|
||||||
|
|
||||||
This will add a principal for you. You have to specify the realm.
|
This will add a principal for you.
|
||||||
|
|
||||||
@example
|
@example
|
||||||
kdb_edit> add host/my.computer@@MY.REALM
|
kdb_edit> add host/my.computer
|
||||||
Max ticket life [86400]:
|
Max ticket life [86400]:
|
||||||
Max renewable ticket [432000]:
|
Max renewable ticket [432000]:
|
||||||
Password:
|
Password:
|
||||||
@@ -40,7 +54,8 @@ Verifying password - Password:
|
|||||||
@end example
|
@end example
|
||||||
|
|
||||||
This creates a host entry for your computer (this could be anything, but
|
This creates a host entry for your computer (this could be anything, but
|
||||||
a `host' principal is most useful).
|
a `host' principal is most useful). Try using the password
|
||||||
|
@samp{random}. That should generate a random key.
|
||||||
|
|
||||||
Now start the KDC (press control-D to exit kdb_edit).
|
Now start the KDC (press control-D to exit kdb_edit).
|
||||||
|
|
||||||
@@ -48,29 +63,18 @@ Now start the KDC (press control-D to exit kdb_edit).
|
|||||||
$ ./kdc &
|
$ ./kdc &
|
||||||
@end example
|
@end example
|
||||||
|
|
||||||
You will have to create a @file{/etc/krb5.conf} with the following contents:
|
|
||||||
|
|
||||||
@example
|
|
||||||
[realms]
|
|
||||||
MY.REALM = @{
|
|
||||||
kdc = my.computer
|
|
||||||
@}
|
|
||||||
[domain_realm]
|
|
||||||
my.computer = MY.REALM
|
|
||||||
@end example
|
|
||||||
|
|
||||||
Now, try to get some credentials.
|
Now, try to get some credentials.
|
||||||
|
|
||||||
@example
|
@example
|
||||||
$ ../kuser/kinit me@@MY.REALM
|
$ ../kuser/kinit me
|
||||||
Password:
|
me@@MY.REALM's Password:
|
||||||
$ ../kuser/klist
|
$ ../kuser/klist
|
||||||
Credentials cache: /tmp/krb5cc_3008
|
Credentials cache: /tmp/krb5cc_3008
|
||||||
Principal: me@@MY.REALM
|
Principal: me@@MY.REALM
|
||||||
|
|
||||||
Issued Expires Principal
|
Issued Expires Principal
|
||||||
Jul 13 07:25:55 Jul 14 07:25:55 krbtgt/MY.REALM@@MY.REALM
|
Jul 13 07:25:55 Jul 14 07:25:55 krbtgt/MY.REALM@@MY.REALM
|
||||||
$ ../kuser/kfoo host/my.computer@@MY.REALM
|
$ ../kuser/kfoo host/my.computer
|
||||||
$ ../kuser/klist
|
$ ../kuser/klist
|
||||||
Credentials cache: /tmp/krb5cc_3008
|
Credentials cache: /tmp/krb5cc_3008
|
||||||
Principal: me@@MY.REALM
|
Principal: me@@MY.REALM
|
||||||
@@ -80,5 +84,5 @@ Jul 13 07:25:55 Jul 14 07:25:55 krbtgt/MY.REALM@@MY.REALM
|
|||||||
Jul 13 07:25:55 Jul 14 07:25:55 host/my.computer@@MY.REALM
|
Jul 13 07:25:55 Jul 14 07:25:55 host/my.computer@@MY.REALM
|
||||||
@end example
|
@end example
|
||||||
|
|
||||||
Extending this example to do a full test of rsh or telnet is left as an
|
Then you should try to run the programs in `appl/test', `appl/rsh', and
|
||||||
exercise to the reader.
|
`appl/telnet'. This is left as an exercise to the reader.
|
||||||
|
Reference in New Issue
Block a user