From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Sat, 18 Mar 2023 19:32:35 +0000 (+0100)
Subject: krb5: Change /var/kerberos to /var/lib/kerberos
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ce79e5ec81d988764262afb53a61c9a696b64ed0;p=people%2Fstevee%2Fipfire-3.x.git

krb5: Change /var/kerberos to /var/lib/kerberos

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/krb5/kdc.conf b/krb5/kdc.conf
index a4f590150..ef9974454 100644
--- a/krb5/kdc.conf
+++ b/krb5/kdc.conf
@@ -5,8 +5,8 @@
 [realms]
  EXAMPLE.COM = {
   #master_key_type = aes256-cts
-  acl_file = /var/kerberos/krb5kdc/kadm5.acl
+  acl_file = /var/lib/kerberos/krb5kdc/kadm5.acl
   dict_file = /usr/share/dict/words
-  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
+  admin_keytab = /var/lib/kerberos/krb5kdc/kadm5.keytab
   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
  }
diff --git a/krb5/krb5.nm b/krb5/krb5.nm
index 9113a4a55..075019d3c 100644
--- a/krb5/krb5.nm
+++ b/krb5/krb5.nm
@@ -7,7 +7,7 @@ name       = krb5
 version    = %{ver_maj}.%{ver_min}
 ver_maj    = 1.20
 ver_min    = 1
-release    = 3
+release    = 4
 
 groups     = System/Libraries
 url        = https://web.mit.edu/kerberos/www/
@@ -47,7 +47,7 @@ build
 	configure_options += \
 		--enable-shared \
 		--disable-rpath \
-		--localstatedir=/var/kerberos \
+		--localstatedir=%{sharedstatedir}/kerberos \
 		--with-system-et \
 		--with-system-ss \
 		--with-netlib=-lresolv \
@@ -70,9 +70,9 @@ build
 
 	install_cmds
 		# Sample KDC config files (bundled kdc.conf and kadm5.acl).
-		mkdir -pv %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc
-		install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/
-		install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/
+		mkdir -pv %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc
+		install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/
+		install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/
 
 		# Default configuration file for everything.
 		mkdir -pv %{BUILDROOT}/etc
diff --git a/krb5/systemd/kadmin.service b/krb5/systemd/kadmin.service
index 7775ea74c..4d8bbbf57 100644
--- a/krb5/systemd/kadmin.service
+++ b/krb5/systemd/kadmin.service
@@ -1,7 +1,7 @@
 [Unit]
 Description=Kerberos 5 Password-changing and Administration
 After=syslog.target network.target
-ConditionPathExists=!/var/kerberos/krb5kdc/kpropd.acl
+ConditionPathExists=!/var/lib/kerberos/krb5kdc/kpropd.acl
 
 [Service]
 Type=forking
diff --git a/krb5/systemd/kprop.service b/krb5/systemd/kprop.service
index 99ba12976..3f5816535 100644
--- a/krb5/systemd/kprop.service
+++ b/krb5/systemd/kprop.service
@@ -1,7 +1,7 @@
 [Unit]
 Description=Kerberos 5 Propagation
 After=syslog.target network.target
-ConditionPathExists=/var/kerberos/krb5kdc/kpropd.acl
+ConditionPathExists=/var/lib/kerberos/krb5kdc/kpropd.acl
 
 [Service]
 Type=forking