When the passwd is called on a system with a date set to 1st Jan
1970, the change date is set to 0, which has a special meaning:
"The value 0 has a special meaning, which is that the user should change
her pasword the next time she will log in the system."
Thanks to this patch, when the password is changed on 1st on Jun 1970 the
change date is set to 1.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Revert part of a commit:
f14e28c9

 Setup default config for the switch (WR profile by default)

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

partly revert the commit:
70c80659

 Add Kconfig-sfp-fiber.in in dot-config

The file Kconfig_sfp_fiber.in is copied during the build from the repo's
root.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

- Include missing in wr-constants.h
- Get Hw specification from halshmem instead of define
- Some modifications to access to FPGA

- update PPSi submodule
- Adapt the display of wr_mon to PPSi changes

Add LDAP+kerberos support
This changes the used standard C library (due to lack of /etc/nsswitch.conf support)
and uses openssh instead of dropbear (due to lack of LDAP/kerberos
support in the dropbear)

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Since nss-pam-ldapd 0.8.4 the uniqueMember attribute was replaced by
using the member attribute by default. This means that you should use

map group member sAMAccountName

https://lists.arthurdejong.org/nss-pam-ldapd-users/2017/msg00012.html



Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

This will keep the suid bit for:
--sudo
--screen
--ssh-keysign

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

dropbear was replaced, because it does not support correctly LDAP+kerberos.

It was almost working. With LDAP+Kerberos over PAM dropbear was prompting once
more for a password when the correct was given.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

It is assumed that authorization is done via LDAP

No need to give extra password when using sudo

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

otherwise openssh complains at the root login

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

--nslcd does not support uniqueMember, comment it out:
map    group  uniqueMember     member
--run nslcd as root, remove gid and uid

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

add:
--glibc
--libkrb5
--nss-pam-ldapd
--openldap
--linux-pam

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Downloaded from:
https://linux.web.cern.ch/linux/docs/nslcd.conf.example



Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Jean-Claude BAU authored 5 years ago and Adam Wujek committed 5 years ago

1/ wr_date script:
- Started before PPSi
- Set number of NTP retries to 10 if GM otherwise 1. GM info is
extracted from dot-config
- Clock source is controlled directly with wr_date tool
- Can be started any time without any risk to set a wrong date (see
point 2)
2/ wr_date
- 'set host' parameters take into account the time mode ( FR: set
sec+ns, BC: time cannot be set, GM: set seconds only+wait to be in a
middle of a second)
- function substrat_substrat() moved to time_lib.h. Also used by wr_mon
3/ wr_mon
- Print TAI-UTC
- Update Timing Mode & PLL locking state displayed values