xref: /onnv-gate/usr/src/cmd/krb5/slave/krb5_prop.xml (revision 6426:a88591926d3d)
10Sstevel@tonic-gate<?xml version='1.0'?>
20Sstevel@tonic-gate<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
30Sstevel@tonic-gate<!--
4*6426Smp153739	Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
50Sstevel@tonic-gate	Use is subject to license terms.
60Sstevel@tonic-gate
70Sstevel@tonic-gate	pragma ident	"%Z%%M%	%I%	%E% SMI"
80Sstevel@tonic-gate
90Sstevel@tonic-gate	NOTE:  This service manifest is not editable; its contents will
100Sstevel@tonic-gate	be overwritten by package or patch operations, including
110Sstevel@tonic-gate	operating system upgrade.  Make customizations in a different
120Sstevel@tonic-gate	file.
130Sstevel@tonic-gate
140Sstevel@tonic-gate	Service manifest for the krb5_prop service.
150Sstevel@tonic-gate
160Sstevel@tonic-gate	kpropd can run in two modes, incremental and nonincremental:
170Sstevel@tonic-gate		the new mode of incremental propagation
180Sstevel@tonic-gate			actively polls for updates from the master KDC
190Sstevel@tonic-gate
200Sstevel@tonic-gate		the old mode of nonincremental
210Sstevel@tonic-gate			passively receives full propagations from the master KDC
220Sstevel@tonic-gate
230Sstevel@tonic-gate	refer to kdc.conf(4) to configure incremental or nonincremental modes
240Sstevel@tonic-gate-->
250Sstevel@tonic-gate
260Sstevel@tonic-gate<service_bundle type='manifest' name='SUNWkdcr:kpropd'>
270Sstevel@tonic-gate
280Sstevel@tonic-gate<service
290Sstevel@tonic-gate	name='network/security/krb5_prop'
300Sstevel@tonic-gate	type='service'
310Sstevel@tonic-gate	version='1'>
320Sstevel@tonic-gate
330Sstevel@tonic-gate	<create_default_instance enabled='false' />
340Sstevel@tonic-gate
350Sstevel@tonic-gate	<dependency
360Sstevel@tonic-gate		name='dns'
370Sstevel@tonic-gate		grouping='require_all'
380Sstevel@tonic-gate		restart_on='error'
390Sstevel@tonic-gate		type='service'>
400Sstevel@tonic-gate		<service_fmri value='svc:/network/dns/client' />
410Sstevel@tonic-gate	</dependency>
420Sstevel@tonic-gate
430Sstevel@tonic-gate	<exec_method
440Sstevel@tonic-gate		type='method'
450Sstevel@tonic-gate		name='start'
46*6426Smp153739		exec='/usr/lib/krb5/kpropd -S'
470Sstevel@tonic-gate		timeout_seconds='60'>
480Sstevel@tonic-gate		<method_context>
490Sstevel@tonic-gate			<method_credential
500Sstevel@tonic-gate				user='root'
510Sstevel@tonic-gate				group='other'
520Sstevel@tonic-gate				privileges='basic,!file_link_any,!proc_info,!proc_session,net_privaddr'
530Sstevel@tonic-gate			/>
540Sstevel@tonic-gate		</method_context>
550Sstevel@tonic-gate	</exec_method>
560Sstevel@tonic-gate
570Sstevel@tonic-gate	<exec_method
580Sstevel@tonic-gate		type='method'
590Sstevel@tonic-gate		name='stop'
600Sstevel@tonic-gate		exec=':kill'
610Sstevel@tonic-gate		timeout_seconds='60' />
620Sstevel@tonic-gate
630Sstevel@tonic-gate	<stability value='Unstable' />
640Sstevel@tonic-gate
650Sstevel@tonic-gate	<template>
660Sstevel@tonic-gate		<common_name>
670Sstevel@tonic-gate			<loctext xml:lang='C'>
680Sstevel@tonic-gate			Kerberos propagation daemon for slave KDCs
690Sstevel@tonic-gate			</loctext>
700Sstevel@tonic-gate		</common_name>
710Sstevel@tonic-gate		<documentation>
720Sstevel@tonic-gate			<manpage title='kpropd' section='1M'
730Sstevel@tonic-gate			    manpath='/usr/share/man' />
740Sstevel@tonic-gate		</documentation>
750Sstevel@tonic-gate	</template>
760Sstevel@tonic-gate</service>
770Sstevel@tonic-gate
780Sstevel@tonic-gate</service_bundle>
79