Deletions are marked like this. | Additions are marked like this. |
Line 20: | Line 20: |
apt-get install heimdal-clients libpam-heimdal ntp | apt-get install ntp |
Here is how you clubify a machine.
## Enable CClub packages echo "deb http://debian.club.cc.cmu.edu/debian/ wheezy-cclub contrib" >> /etc/apt/sources.list apt-get update # Trust the CClub signing key for packages (as well as the CClub CA) # this is insecure D: apt-get install cclub-keyring && apt-get update ## Preseed debconf with club-specific settings for several packages, which take effect when those packages are installed apt-get install cclub-debconf-settings ## Install LDAP so the machine knows about club users, and Kerberos for authentication of those users apt-get install libnss-ldapd heimdal-clients libpam-heimdal ## [OPTIONAL] Enable SSH login with Kerberos tickets # this is, unfortunately, interactive; that is, it requires you to type your /admin password # ntp is needed for time synchronization; if the time is off the authentication will mysteriously fail apt-get install ntp kinit -S kadmin/admin $USER/admin # accept all defaults kadmin ank -r host/$HOSTNAME.club.cc.cmu.edu kadmin ext_keytab host/$HOSTNAME.club.cc.cmu.edu sensible-editor /etc/ssh/sshd_config # make sure that none of the following appear uncommented (yes is the default) # GSSAPIAuthentication no # GSSAPIKeyExchange no # GSSAPICleanupCredentials no service sshd restart ## [OPTIONAL] Install AFS and get AFS homedirs for users apt-get install openafs-client libpam-afs-session
You can now log in with your club credentials.