#!/bin/bash # # kadmind Start and stop the Kerberos 5 administrative server. # # chkconfig: - 35 65 # description: Kerberos 5 is a trusted third-party authentication system. \ # This script starts and stops the Kerberos 5 administrative \ # server, which should only be run on the master server for a \ # realm. # processname: kadmind # # Get config. . /etc/sysconfig/network # Check that networking is up. [ ${NETWORKING} = "no" ] && exit 0 # Get config. [ -r /etc/sysconfig/kadmin ] && . /etc/sysconfig/kadmin # Source function library. . /etc/init.d/functions prog="Kerberos 5 Admin Server" kadmind=/usr/kerberos/sbin/kadmind RETVAL=0 # Shell functions to cut down on useless shell instances. start() { if [ ! -f /var/kerberos/krb5kdc/principal ] ; then exit 0 fi if [ -f /var/kerberos/krb5kdc/kpropd.acl ] ; then exit 0 else if [ ! -f /var/kerberos/krb5kdc/kadm5.keytab ] ; then echo -n $"Extracting kadm5 Service Keys: " /usr/kerberos/sbin/kadmin.local -q "ktadd -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw" && success || failure echo fi fi echo -n $"Starting $prog: " daemon ${kadmind} $KADMIND_ARGS RETVAL=$? echo [ $RETVAL = 0 ] && touch /var/lock/subsys/kadmin } stop() { echo -n $"Stopping $prog: " killproc ${kadmind} RETVAL=$? echo [ $RETVAL = 0 ] && rm -f /var/lock/subsys/kadmin } reload() { echo -n $"Reopening $prog log file: " killproc ${kadmind} -HUP RETVAL=$? echo } # See how we were called. case "$1" in start) start ;; stop) stop ;; restart) stop start ;; status) status ${kadmind} RETVAL=$? ;; reload) reload ;; condrestart) if [ -f /var/lock/subsys/kadmin ] ; then stop start fi ;; *) echo $"Usage: $0 {start|stop|status|condrestart|reload|restart}" RETVAL=1 ;; esac exit $RETVAL