From 5d65e7741e0ac50a0c28d9e5c3575a0ae60fb66e Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Sun, 13 Oct 2019 19:01:25 +0000 Subject: Sun Oct 13 19:01:25 UTC 2019 a/pkgtools-15.0-noarch-26.txz: Rebuilt. upgradepkg: add spaces to --dry-run package list. Thanks to Markus Wiesner. l/aspell-0.60.8-x86_64-1.txz: Upgraded. n/network-scripts-15.0-noarch-9.txz: Rebuilt. rc.inet1: Fix typos and spacing. rc.inet2: Start rc.firewall first. This had been later in the script due to the now unsupported idea of having /usr on NFS. Thanks to abga. rc.inet2: If present and executable, start the Kerberos init scripts. rc.inet2: Remove obsolete rpc.pcnfsd/rpc.bwnfsd section from the end. n/proftpd-1.3.6a-x86_64-1.txz: Upgraded. xap/pan-0.146-x86_64-1.txz: Upgraded. --- source/n/network-scripts/scripts/rc.inet2 | 80 +++++++++++++++++-------------- 1 file changed, 45 insertions(+), 35 deletions(-) (limited to 'source/n/network-scripts/scripts/rc.inet2') diff --git a/source/n/network-scripts/scripts/rc.inet2 b/source/n/network-scripts/scripts/rc.inet2 index 300ede3ee..ec68ba0b1 100644 --- a/source/n/network-scripts/scripts/rc.inet2 +++ b/source/n/network-scripts/scripts/rc.inet2 @@ -13,19 +13,52 @@ # Modified for Slackware by Patrick Volkerding -# At this point, we are ready to talk to The World... +# At this point, we are (almost) ready to talk to The World... +# If there is a firewall script, run it before enabling packet forwarding. +# See the HOWTOs on http://www.netfilter.org/ for documentation on +# setting up a firewall or NAT on Linux. In some cases this might need to +# be moved past the section below dealing with IP packet forwarding. +if [ -x /etc/rc.d/rc.firewall ]; then + /etc/rc.d/rc.firewall start +fi + +# Turn on IPv4 packet forwarding support. +if [ -x /etc/rc.d/rc.ip_forward ]; then + . /etc/rc.d/rc.ip_forward start +fi + +# Start krb5kdc, which is the Kerberos version 5 Authentication Service +# and Key Distribution Center (AS/KDC). This needs to run first on both +# master and secondary KDCs. +if [ -x /etc/rc.d/rc.krb5kdc ]; then + sh /etc/rc.d/rc.krb5kdc start +fi + +# Start the Kerberos administration server. This typically runs on the +# master Kerberos server, which stores the KDC database. +if [ -x /etc/rc.d/rc.kadmind ]; then + sh /etc/rc.d/rc.kadmind start +fi + +# Start the Kerberos V5 slave KDC update server. This runs on a slave +# (secondary) KDC server. It allows the master Kerberos server to use +# kprop(8) to propagate its database to the slave servers. +if [ -x /etc/rc.d/rc.kpropd ]; then + sh /etc/rc.d/rc.kpropd start +fi + # Mount remote (NFS) filesystems: if cat /etc/fstab | grep -v '^#' | grep -w nfs 1> /dev/null 2> /dev/null ; then # Start rpc.portmap, /sbin/rpc.lockd, and /sbin/rpc.statd if we find NFS # volumes defined in /etc/fstab since these will need to be running in order - # to mount them. If they are not running, attempting to mount an NFS + # to mount them. If they are not running, attempting to mount an NFS # partition will cause mount to hang, or at least result in unreliable - # operation. Keep this in mind if you plan to mount unlisted NFS + # operation. Keep this in mind if you plan to mount unlisted NFS # partitions... # If you have uncommented NFS partitions in your /etc/fstab, rc.rpc is run - # whether it is set as executable or not. If you don't want to run it, + # whether it is set as executable or not. If you don't want to run it, # comment the NFS partitions out in /etc/fstab or erase/rename rc.rpc. if [ -r /etc/rc.d/rc.rpc ]; then sh /etc/rc.d/rc.rpc start @@ -37,15 +70,15 @@ if cat /etc/fstab | grep -v '^#' | grep -w nfs 1> /dev/null 2> /dev/null ; then fi # If /etc/rc.d/rc.rpc is executable, run it to load rpc.portmap, rpc.lockd, -# and rpc.statd. This might be needed to mount NFS partitions that are not -# listed in /etc/fstab. Starting this twice won't hurt as the script will +# and rpc.statd. This might be needed to mount NFS partitions that are not +# listed in /etc/fstab. Starting this twice won't hurt as the script will # check if things are already running before trying to start them. if [ -x /etc/rc.d/rc.rpc ]; then sh /etc/rc.d/rc.rpc start fi -# Mount remote CIFS filesystems. Note that where possible, using CIFS is -# preferred over SMBFS. SMBFS is no longer actively maintained. +# Mount remote CIFS filesystems. Note that where possible, using CIFS is +# preferred over SMBFS. SMBFS is no longer actively maintained. if cat /etc/fstab | grep -v '^#' | grep -w cifs 1> /dev/null 2> /dev/null ; then echo "Mounting remote CIFS file systems: /sbin/mount -a -t cifs" /sbin/mount -a -t cifs @@ -62,24 +95,13 @@ if cat /etc/fstab | grep -v '^#' | grep -w smbfs 1> /dev/null 2> /dev/null ; the fi # Start the system logger if it is not already running (maybe because /usr -# is on a network partition). +# is on a network partition). NOTE: Don't put /usr on a network partition, +# or even a separate local partition. This is not supported and is likely to +# cause some problems... if [ -x /etc/rc.d/rc.syslog -a -d /var/log -a ! -r /var/run/syslogd.pid ]; then . /etc/rc.d/rc.syslog start fi -# If there is a firewall script, run it before enabling packet forwarding. -# See the HOWTOs on http://www.netfilter.org/ for documentation on -# setting up a firewall or NAT on Linux. In some cases this might need to -# be moved past the section below dealing with IP packet forwarding. -if [ -x /etc/rc.d/rc.firewall ]; then - /etc/rc.d/rc.firewall start -fi - -# Turn on IPv4 packet forwarding support. -if [ -x /etc/rc.d/rc.ip_forward ]; then - . /etc/rc.d/rc.ip_forward start -fi - # Start the inetd server: if [ -x /etc/rc.d/rc.inetd ]; then /etc/rc.d/rc.inetd start @@ -106,7 +128,7 @@ if [ -x /etc/rc.d/rc.openvpn ]; then /etc/rc.d/rc.openvpn start fi -# Start the NFS server. Note that for this to work correctly, you'll +# Start the NFS server. Note that for this to work correctly, you'll # need nfsd support in the kernel (the startup script will try to load # the module for you). # You'll also need to set up some shares in /etc/exports. @@ -128,15 +150,3 @@ fi # echo "Starting system status server: /usr/sbin/rwhod" # /usr/sbin/rwhod # fi - -# # Fire up the PC-NFS daemon(s). This is a primarily obsolete system, and may -# # not be very secure. It's not at all needed for normal NFS server support. -# # You probably should not run this. -# if [ -x /usr/sbin/rpc.pcnfsd ]; then -# echo "Starting PC-NFS daemons: /usr/sbin/rpc.pcnfsd /usr/sbin/rpc.bwnfsd" -# /usr/sbin/rpc.pcnfsd /var/spool/lpd -# fi -# if [ -x /usr/sbin/rpc.bwnfsd ]; then -# /usr/sbin/rpc.bwnfsd /var/spool/lpd -# fi - -- cgit v1.2.3