NAME

lcfg-auth - LCFG auth component

DESCRIPTION

This component contructs all the basic authorization files allowing access to the machine. This includes /etc/passwd, /etc/group, /etc/hosts.equiv and /root/.rhosts.

accessrules

A list of rules for the /etc/security/access.conf file.

accessrule_tag

The definition for the access rule associated with tag.

base_group

The base file used to populate /etc/group.

base_passwd

The base file used to populate /etc/passwd.

consolepermclasses

This is a list of console file and device classes to be defined in the /etc/security/console.perms file.

consolepermclass_tag 5B This is the definition for the class associated with tag.

consolepermrules

This is a list of rules for the file and device classes defined in consolepermclasses.

consolepermrule_tag

This is the definition for the rule associated with tag.

equiv

A (space-separated) list of items to be added to the hosts.equiv file.

extragroup

A list of group entries tags (see grpent_TAG) to be added to /etc/group.

extrapasswd

A list of passwd entries tags (see pwent_TAG) to be added to /etc/passwd.

grpent_TAG

An additional group entry.

managepasswd

This boolean controls whether the component manages the /etc/passwd and /etc/shadow files. It defaults to "true".

owner

A (space-separated) list of workstation owners. Valid usernames in this list will be added to the /etc/security/access.conf file.

protectdevs

List of devices (eg disks) which should not be added to the /etc/security/console.perms file. Normally set to the same value as the fstab.disks resource. Note that the device entry should be shortform (eg hda rather than /dev/hda).

pwent_TAG

An additional passwd entry.

rhosts

A (space separated) list of items to be added to the /root/.rhosts

rootpwd

The encrypted root password.

securetty

A (space-separated) list of entries to populate /etc/securetty.

shadow

This resource, if set to yes, will convert the passwd file files to the more secure shadow equivalent.

tmp_mode

If non-null, specifies the chmod protection mask to be applied to /tmp.

users

A (space-separated) list of users or netgroups to be added to the /etc/security/access.conf file.

var_tmp_mode

If non-null, specifies the chmod protection mask to be applied to /var/tmp.

PLATFORMS

Scientific5, Fedora12

AUTHOR

Alastair Scobie <ascobie@inf.ed.ac.uk>