# krb-hep-0.ks

# sl5.7 on vmware

# install options
install
nfs --server=10.10.128.16 --dir=/export/distro/SL/57/x86_64
firstboot --disable
logging --host=10.10.128.15

lang en_US.UTF-8
keyboard us

authconfig --enableshadow --enablemd5
rootpw --iscrypted $1$GoGreen!$EDUO5NpTupZOHCx8jbbmS.
firewall --enabled --trust=eth0

selinux --enforcing
timezone --utc America/New_York
skipx
bootloader --location=mbr --driveorder=sda

# partitioning

# clear sda, make /boot partition
zerombr
clearpart --all --drives=sda
part /boot --fstype=ext3 --size=100

# one pv, one vg
part pv.01 --grow --size=1
volgroup vg_sys pv.01

# filesystems
logvol swap               --name=lv_swap --vgname=vg_sys --size=2000
logvol /    --fstype=ext3 --name=lv_root --vgname=vg_sys --size=10000

# networking
network --onboot yes --device eth0 --bootproto static --ip 10.10.136.80 --netmask=255.255.240.0 --noipv6 --nameserver 10.10.128.16

network --onboot yes --device eth1 --bootproto static --ip 35.9.71.40   --netmask=255.248.0.0   --noipv6 --gateway 35.8.2.3 --hostname krb-hep-0.pa.msu.edu

reboot

%packages
@base
@core
@misc-sl
@text-internet
ntp
krb5-workstation
krb5-server

#Post Scripts
%post
# paren for redirect of ouput to logfile...
(

echo "post script running `date`"

# Tom's ssh key for root access
mkdir /root/.ssh
chmod 700 /root/.ssh
touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6AUMJD8bH5xboNDUAvK2\
yrIYHpfE9MDdtA0WrBuLR9ng/e8soOctaa1vylmyBCYVBdK09kUnm5Zx\
7IkjypFOMGWPUJCBOkK+HfFKwqVnx6QpwinURN9EO4BdYMjoTROHLmKJ\
tCrYFxLbxJk6eC/pHq+nNuvKETClBUGExElf+4s= Tom's key used \
for admin of msuhep nodes
ENDSSHKEY

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApn2AFiC3Oi30VaeZ7o8h\
I6fV7oWpUp9Hq8sWABHRftohXufJ+KdjlH1Xv+iwfXlk8iiM8SRtuJol\
RtaOyMEuwMZKz8+AzS0VXceBUd/EAcUCAKHsLO4VRwJpUfMNan6jj1OD\
V4hx5zL9ZecR/C2VpOoYSusFQ1emBdvOO4lE2TAM1gicrjMgHWfo5fu6\
PsFb/ShXu4N52mzTO0LYa0pDUePsZfucEo2M0rDywtAOxENQ/bZ9E7Tc\
jp2Hzuh5rE145TeN/J2wh3Bw09d+FernumAtwayD3VRoLZudlU9Z/+h+\
6dgZ6Y9XHumjvUIvU8JTFDay5eqtPM5ueIUI7xO/hw== rockwell ke\
y for aglt2 admin. jul-3-2008"
ENDSSHKEY

# SSHD Config, defaults have been stripped out
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.install.orig
cat > /etc/ssh/sshd_config <<ENDSSHCONFIG
SyslogFacility AUTHPRIV
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
PermitRootLogin without-password
Subsystem sftp /usr/libexec/openssh/sftp-server
ENDSSHCONFIG

# avahi off
chkconfig avahi-daemon off

# try to set time
ntpdate 10.10.128.8

# ntpd is left off in default install...
chkconfig ntpd on

# paren for redirect of ouput to logfile...
) 2>&1 | tee /root/anaconda_post.log