Differences between revisions 9 and 10
Deletions are marked like this. Additions are marked like this.
Line 20: Line 20:
apt-get install heimdal-clients libpam-heimdal ntp apt-get install ntp

Here is how you clubify a machine.

## Enable CClub packages
echo "deb http://debian.club.cc.cmu.edu/debian/ wheezy-cclub contrib" >> /etc/apt/sources.list
apt-get update
# Trust the CClub signing key for packages (as well as the CClub CA)
# this is insecure D:
apt-get install cclub-keyring && apt-get update

## Preseed debconf with club-specific settings for several packages, which take effect when those packages are installed
apt-get install cclub-debconf-settings

## Install LDAP so the machine knows about club users, and Kerberos for authentication of those users
apt-get install libnss-ldapd heimdal-clients libpam-heimdal

## [OPTIONAL] Enable SSH login with Kerberos tickets
# this is, unfortunately, interactive; that is, it requires you to type your /admin password
# ntp is needed for time synchronization; if the time is off the authentication will mysteriously fail
apt-get install ntp
kinit -S kadmin/admin $USER/admin
# accept all defaults
kadmin ank -r host/$HOSTNAME.club.cc.cmu.edu
kadmin ext_keytab host/$HOSTNAME.club.cc.cmu.edu
sensible-editor /etc/ssh/sshd_config
# make sure that none of the following appear uncommented (yes is the default)
# GSSAPIAuthentication no
# GSSAPIKeyExchange no
# GSSAPICleanupCredentials no
service sshd restart

## [OPTIONAL] Install AFS and get AFS homedirs for users
apt-get install openafs-client libpam-afs-session

You can now log in with your club credentials.

Common Maintenance Tasks/Clubifying a machine (last edited 2016-04-01 01:39:06 by sbaugh@CLUB.CC.CMU.EDU)