Attachment 61392 Details for Bug 140069

autoyast config file

server.scsi.raid1 (text/plain), 37.23 KB, created by edgar nielsen on 2005-12-19 19:04:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: edgar nielsen

Created: 2005-12-19 19:04:58 UTC

Size: 37.23 KB

patch

obsolete

><?xml version="1.0"?>
><!DOCTYPE profile SYSTEM "/usr/share/autoinstall/dtd/profile.dtd">
><profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
>  <bootloader>
>    <activate config:type="boolean">true</activate>
>    <initrd_modules config:type="list">
>      <initrd_module>
>        <module>piix</module>
>      </initrd_module>
>      <initrd_module>
>        <module>aic79xx</module>
>      </initrd_module>
>      <initrd_module>
>        <module>processor</module>
>      </initrd_module>
>      <initrd_module>
>        <module>thermal</module>
>      </initrd_module>
>      <initrd_module>
>        <module>fan</module>
>      </initrd_module>
>      <initrd_module>
>        <module>jbd</module>
>      </initrd_module>
>      <initrd_module>
>        <module>ext3</module>
>      </initrd_module>
>      <initrd_module>
>        <module>raid1</module>
>      </initrd_module>
>    </initrd_modules>
>    <loader_type>grub</loader_type>
>    <global config:type="list">
>      <global_entry>
>        <key>default</key>
>        <value>0</value>
>      </global_entry>
>      <global_entry>
>        <key>timeout</key>
>        <value>7</value>
>      </global_entry>
>      <global_entry>
>        <key>password</key>
>        <value>--md5 REMOVEDFORSECURITY</value>
>      </global_entry>
>    </global>
>    <repl_mbr config:type="boolean">true</repl_mbr>
>    <sections config:type="list">
>      <section>
>        <append>selinux=0  splash=silent showopts</append>
>        <initial>1</initial>
>        <initrd>(hd0,0)/boot/initrd</initrd>
>        <kernel>(hd0,0)/boot/vmlinuz</kernel>
>        <lines_cache_id>0</lines_cache_id>
>        <name>SUSE LINUX 10.0</name>
>        <original_name>linux</original_name>
>        <root>/dev/md0</root>
>        <type>image</type>
>      </section>
>      <section>
>        <append>showopts ide=nodma apm=off acpi=off noresume selinux=0 nosmp noapic maxcpus=0 edd=off 3</append>
>        <initrd>(hd0,0)/boot/initrd</initrd>
>        <kernel>(hd0,0)/boot/vmlinuz</kernel>
>        <lines_cache_id>1</lines_cache_id>
>        <name>Failsafe -- SUSE LINUX 10.0</name>
>        <original_name>failsafe</original_name>
>        <root>/dev/md0</root>
>        <type>image</type>
>      </section>
>    </sections>
>  </bootloader>
>  <files config:type="list">
>    <file>
>      <file_contents><![CDATA[# perl CPAN uses this, probably all LWP programs
>export FTP_PASSIVE=1
>
>#echo "In /etc/bash.bashrc.local"
>
>pathmunge () {
>	if ! echo $PATH | /bin/egrep -q "(^|:)$1($|:)" ; then
>	   if [ "$2" = "after" ] ; then
>	      PATH=$PATH:$1
>	   else
>	      PATH=$1:$PATH
>	   fi
>	fi
>}
>
># Path manipulation
>pathmunge /usr/local/fmpp/bin
>pathmunge /usr/local/java/bin
>pathmunge /sbin
>pathmunge /usr/sbin
>pathmunge /usr/local/sbin
>
>pathmunge /usr/X11R6/bin after
>
>unset pathmunge
>
>id | grep -q viusers
>if [ $? ]
>then
>	# Use vi mode for editing in bash
>	set -o vi
>else
>	# Use emacs mode for editing in bash
>	set -o emacs
>fi
>
># Default set of  aliases
>alias h="history 24"
>alias pd=pushd
>alias h=history
>alias ls="/bin/ls -FC"
>alias more=/usr/bin/less
>alias mroe=more
>alias t=traceroute
>alias tn="traceroute -n"
># Default enscript to 2-up, landscape mode
>alias enscript="enscript -2 -r -G"
>
># By default, limit the time a key is available
>alias ssh-add="ssh-add -t 32400"
>alias keychain="keychain --timeout 480"
>alias ossh="ssh -o 'PubkeyAuthentication no'"
>
># Shortcut for people using keys but not keychain
>alias skeys="ssh-add -t 32400 ~/.ssh/Keys/*[^b]"
># Shortcut for people using keys with keychain
>alias keys="keychain --timeout 480 \`find ~/.ssh/Keys -type f | egrep -v '.pub$|.tar$'\`"
>
>shopt -u cmdhist	#Don't save multiline commands as 1 command
>set -o histexpand	#Support csh-style ! for history
>
>HISTFILESIZE=400
>HISTSIZE=400
>EDITOR=/bin/vi
>TMOUT=1800		# Auto-logout
>CFINPUTS=/var/cfengine/inputs
>JAVA_HOME=/usr/local/java
>
>export EDITOR TMOUT HISTSIZE HISTFILESIZE CFINPUTS JAVA_HOME
>
># get agent info from keychain if used
>[ -f $HOME/.keychain/$HOSTNAME-sh ] && source $HOME/.keychain/$HOSTNAME-sh
>[ -f $HOME/.keychain/$HOSTNAME-sh-gpg ] && source  $HOME/.keychain/$HOSTNAME-sh-gpg
>
># Get the user's aliases
>if [ -r ~/.alias ]
>then
>	. ~/.alias
>fi
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/bash.bashrc.local</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[# Allow only from XX
>#For rsync backups
>from="REMOVEDFORSECURITY",no-port-forwarding,no-agent-forwarding,no-X11-forwarding REMOVEDFORSECURITY
>#Allow XX only from XX
>from="REMOVEDFORSECURITY",no-port-forwarding,no-agent-forwarding,no-X11-forwarding REMOVEDFORSECURITY
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/root/.ssh/authorized_keys</file_path>
>      <file_permissions>u=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[#
># $Id: server.scsi.raid1,v 1.4 2005/12/19 18:02:24 edgar Exp edgar $
>#
>/home	/etc/auto.home
>/DHAP	/etc/auto.DHAP
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/auto.master</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[# $Id: server.scsi.raid1,v 1.4 2005/12/19 18:02:24 edgar Exp edgar $
>DHAP -fstype=nfs,rsize=8192,wsize=8192,intr FILESERVER.dhapdigital.com:/home/Shares/DHAP
>Public -fstype=nfs,rsize=8192,wsize=8192,intr FILESERVER.dhapdigital.com:/home/public
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/auto.DHAP</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[# $Id: server.scsi.raid1,v 1.4 2005/12/19 18:02:24 edgar Exp edgar $
>* -fstype=nfs,rsize=8192,wsize=8192,intr  FILESERVER.dhapdigital.com:/home/&
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/auto.home</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[## Path:	Network/Hardware/Config
>## Description:	Set some general network configuration
>## Type:	string("","-","+")
>## Default:	"+"
>## ServiceRestart: network
>#
># DEFAULT_BROADCAST is used when no individual BROADCAST is set. It can get one
># of the following values:
># ""  : don't set a broadcast address
># "-" : use IPADDR with all host bits deleted
># "+" : use IPADDR with all host bits set
>DEFAULT_BROADCAST="+"
>
>## Type:	yesno
>## Default:	yes
># sometimes we want some script to be executed after an interface has been
># brought up, or before an interface is taken down. 
># default dir is /etc/sysconfig/network/if-up.d for POST_UP and
># /etc/sysconfig/network/if-down.d for PRE_DOWN
>GLOBAL_POST_UP_EXEC="yes"
>GLOBAL_PRE_DOWN_EXEC="yes"
>
>## Type:        yesno
>## Default:     no
># If ifup should check if an ip address is already in use, set this to yes.
># Make sure that packet sockets (CONFIG_PACKET) are supported in the kernel,
># since this feature uses arping, which depends on that.
># Also be aware that this takes one second per interface; consider that when
># setting up a lot of interfaces. 
>CHECK_DUPLICATE_IP="yes"
>
>## Type:        yesno
>## Default:     no
># Switch on/off debug messages for all network configuration stuff. If set to no
># most scripts can enable it locally with "-o debug".
>DEBUG="no"
>
>## Type:        yesno
>## Default:     yes
># All error and info messages from network and hardware configuration scripts go
># to stderr. Most tools that call sysconfig scripts (udev, rcnetwork, scpm,
># YaST) catch these messages and can log them. So some messages appear twice in
># syslog. If you don't like that, then set USE_SYSLOG=no.
>USE_SYSLOG="yes"
>
>## Type:        yesno
>## Default:     yes
># There are some services (ppp, ippp, dhcp-client, pcmcia, hotplug) that have to
># change the /etc/resolv.conf dynamically at certain times.  E.g. if ppp/ippp
># establishes a connection and is supplied by the peer with a list of
># nameservers. Or pcmcia needs to set the correct nameserver for the choosen
># configuration scheme. If you don't like these services to change
># /etc/resolv.conf at all, then set this variable to "no".
># If unsure, leave it at the default (which is "yes").
>#
>MODIFY_RESOLV_CONF_DYNAMICALLY="yes"
>
>## Type:        yesno
>## Default:     no
># Like MODIFY_RESOLV_CONF_DYNAMICALLY, except it modifies /etc/named.conf.
># If unsure, leave it at the default (which is "no").
>#
>MODIFY_NAMED_CONF_DYNAMICALLY="no"
>
># Handling of network connections
># ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
># These features are designed for the convenience of the experienced
># user. If you encounter problems you don't understand then switch
># them off. That is the default.
># Please do not complain if you get troubles. But if you want help to
># make them smarter write to <http://www.suse.de/feedback>.
>
>## Type:	yesno
>## Default:	no
>#
># If you are interested in the connections and nfs mounts that use a
># network interface, you can set CONNECTION_SHOW_WHEN_IFSTATUS="yes".
># Then you will see them with 'ifstatus <interface>' (or 'ifstatus
># <config>')
># This one _should_ never harm ;)
>#
>CONNECTION_SHOW_WHEN_IFSTATUS="no"
>
>## Type:	yesno
>## Default:	no
>#
># If an interface should be set down only if there are no active
># connections, then use CONNECTION_CHECK_BEFORE_IFDOWN="yes"
>#
>CONNECTION_CHECK_BEFORE_IFDOWN="no"
>
>## Type:	yesno
>## Default:	no
>#
># If these connetions (without the nfs mounts) should be closed when
># shutting down an interface, set CONNECTION_CLOSE_BEFORE_IFDOWN="yes".
># WARNING: Be aware that this may terminate applications which need
># one of these connections!
>#
>CONNECTION_CLOSE_BEFORE_IFDOWN="no"
>
>## Type:	yesno
>## Default:	no
>#
># If you are a mobile laptop user and like even nfs mounts to be
># closed when you leave your current workplace, then set
># CONNECTION_UMOUNT_NFS_BEFORE_IFDOWN="yes". This does only work
># if CONNECTION_CLOSE_BEFORE_IFDOWN="yes", too.
># WARNING: Be aware that this may terminate applications which use
># these nfs mounts as working directory. Be very carefull if your home
># is mounted via nfs!!!
># WARNING: This may even lead to hanging ifdown processes if there are
># processes that could not be terminated. If you are using
># hotpluggable devices (pcmcia, usb, firewire), first shut them down
># before unplugging!
>#
>CONNECTION_UMOUNT_NFS_BEFORE_IFDOWN="no"
>
>## Type:	yesno
>## Default:	no
>#
># If terminating processes that use a connection or nfs mount is not
># enough, then they can be killed after an unsuccesfull termination.
># If you want that set CONNECTION_SEND_KILL_SIGNAL="yes"
>#
>CONNECTION_SEND_KILL_SIGNAL="no"
>
>## Type:        string
>## Default:     ""
>#
># Here you may specify which interfaces have to be up and configured properly
># after 'rcnetwork start'. rcconfig will return 'failed' if any of these
># interfaces is not up. You may use interface names as well but better use
># hardware descriptions of the devices (eth-id-<macaddress> or eth-bus-...  See
># man ifup for 'hardware description'). The network start script will wait for
># these interfaces, but not longer as set in WAIT_FOR_INTERFACES.
># You need not to add dialup or tunnel interfaces here, only physical devices.
># The interface 'lo' is always considered to be mandatory and can be omitted.
>#
># If this variable is empty, rcnetwork tries to derive the list of mandatory
># devices automatically from the list of existing configurations. Configurations
># with names bus-pcmcia or bus-usb or with STARTMODE=hotplug are skipped. (try
># '/etc/init.d/rc5.d/S*network start -o debug fake | grep MANDAT')
>MANDATORY_DEVICES=""
>
>## Type:	integer
>## Default:	20
>#
># Some interfaces need some time to come up or come asynchronously via hotplug.
># WAIT_FOR_INTERFACES is a global wait for all mandatory interfaces in
># seconds. If empty no wait occurs.
>#
>WAIT_FOR_INTERFACES="20"
>
>## Type:	yesno
>## Default:	yes
>#
># With this variable you can determine if the SuSEfirewall when enabled
># should get started when network interfaces are started.
>FIREWALL="yes"
>
>## Type:        string
>## Default:     "eth*[0-9]|tr*[0-9]|wlan[0-9]|ath[0-9]"
>#
># Automatically add a linklocal route to the matching interfaces.
># This string is used in a bash "case" statement, so it may contain
># '*', '[', ']'  and '|' meta-characters.
>#
>LINKLOCAL_INTERFACES="eth*[0-9]|tr*[0-9]|wlan[0-9]|ath[0-9]"
>
>## Type:        string
>## Default:     "-f -I"
>#
># Set default options for ifplugd. You may also set them in an ifcfg-* file
># individually. Have a look at 'man ifplug' for details. We let ifplugd set the
># interface UP when starting, because there are many interfaces where link beat
># cannot be detected otherwise. If you want the interface to stay down then add
># the option '-a'.
>#
>IFPLUGD_OPTIONS="-f -I"
>
>## Type:        yesno
>## Default:     yes
>#
># Forces all interfaces eth* ath* wlan* and ra* to be persistent via udev.
># See /usr/share/doc/package/sysconfig/README.Persistent_Interface_Names for
># details. 
>#
>FORCE_PERSISTENT_NAMES=yes
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/sysconfig/network/config</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[## Path:	Network/DHCP/DHCP client
>## Description:	DHCP configuration tweaking
>#
># Note: 
># To configure one or more interfaces for DHCP configuration, you have to
># change the BOOTPROTO variable in /etc/sysconfig/network/ifcfg-<interface> to
># 'dhcp' (and possibly set STARTMODE='onboot'). 
>#
># Most of these options are used only by dhcpcd, not by the ISC dhclient (which 
># uses a config file).
>#
># Most of the options can be overridden by setting them in the ifcfg-* files,
># too.
>
>## Type:	string
>## Default:	""
>## ServiceRestart: network
>#
># Which DHCP client should be used? 
># If empty, dhcpcd is tried, then dhclient 
># Other possible values:
># 	dhcpcd   (DHCP client daemon)
># 	dhclient (ISC dhclient)
>DHCLIENT_BIN=""
>
>## Type:	yesno
>## Default:	no
>#
># Start in debug mode? (yes|no)
># (debug info will be logged to /var/log/messages for dhcpcd, or to
># /var/log/dhclient-script for ISC dhclient)
>#
>DHCLIENT_DEBUG="yes"
>
>## Type:	yesno
>## Default:	no
>#
># Should the DHCP client set the hostname? (yes|no)
># 
># When it is likely that this would occur during a running X session, 
># your DISPLAY variable could be screwed up and you won't be able to open
># new windows anymore, then this should be "no". 
>#
># If it happens during booting it won't be a problem and you can 
># safely say "yes" here. For a roaming notebook with X kept running, "no"
># makes more sense. 
>#
>DHCLIENT_SET_HOSTNAME="yes"
>
>## Type:	yesno
>## Default:	yes
>#
># Should the DHCP client modify /etc/resolv.conf at all? 
># If not, set this to "no". (The default is "yes") 
>#
># resolv.conf will also stay untouched when MODIFY_RESOLV_CONF_DYNAMICALLY 
># in /etc/sysconfig/network/config is set to "no". 
>#
>DHCLIENT_MODIFY_RESOLV_CONF="yes"
>
>## Type:	yesno
>## Default:	yes
>#
># Should the DHCP client set a default route (default Gateway) (yes|no)
>#
># When multiple copies of dhcpcd run, it would make sense that only one
># of them does it. 
>#
>DHCLIENT_SET_DEFAULT_ROUTE="yes"
>
>## Type:	yesno
>## Default:	no
>#
># Should the DHCP client modify the NTP configuration? (yes|no)
>#
># If set to yes, /etc/ntp.conf is rewritten (and restored upon exit).
># If you don't want this, set this variable to "no". (The default is "no") 
>#
>DHCLIENT_MODIFY_NTP_CONF="yes"
>
>## Type:	yesno
>## Default:	no
>#
># Should the DHCP client modify the NIS configuration? (yes|no)
>#
># If set to yes, /etc/yp.conf is rewritten (and restored upon exit).
># If you don't want this, set this variable to "no". (The default is "no") 
>#
>DHCLIENT_MODIFY_NIS_CONF="no"
>
>## Type:	yesno
>## Default:	yes
>#
># Should the DHCP client set the NIS domainname? (yes|no)
># (if the server supplies the nis-domain option)
>#
>DHCLIENT_SET_DOMAINNAME="no"
>
>## Type:	yesno
>## Default:	yes
>#
># When writing a new /etc/resolv.conf, should the DHCP client take an 
># existing searchlist and add it to the one derived from the DHCP server? 
>#
>DHCLIENT_KEEP_SEARCHLIST="no"
>
>## Type:	integer
>## Default:	""
>#
># Lease time to request ( -l option)
>#
># Specifies (in seconds) the lease that is suggested to the server. 
># The default is infinite. For a mobile computer you probably want to
># set this to a lower value.
>#
>DHCLIENT_LEASE_TIME=""
>
>## Type:	integer
>## Default:	999999
>#
># (only dhcpcd does use this setting)
>#
># You can set the timeout (dhcpcd will terminate after this time when it 
># does not get a reply from the server). 
>#
># The default timeout of dhcpcd is 60 seconds. However, we'll set it to a 
># much longer time. dhcpcd will then run as a daemon in the background and
># broadcast a DHCPDISCOVER once in a while, trying to get a lease.
>#
>DHCLIENT_TIMEOUT="999999"
>
>## Type:	integer
>## Default:	""
>#
># (only dhcpcd does use this setting)
>#
># INIT-REBOOT timeout ( -z option)
>#
># This timeout is specifically to control how long dhcpcd tries to reacquire
># a previous lease (init-reboot state), before it starts getting a new one. 
># Default: 10
>#
>DHCLIENT_REBOOT_TIMEOUT=""
>
>## Type:	string
>## Default:	AUTO
>#
># specify a hostname to send ( -h option)
>#
># specifies a string used for the hostname option field when dhcpcd sends DHCP
># messages. Some DHCP servers will update nameserver entries (dynamic DNS).
># Also, some DHCP servers, notably those used by @Home Networks, require the
># hostname option field containing a specific string in the DHCP messages from
># clients.
>#
># By default the current hostname is sent ("AUTO"), if one is defined in 
># /etc/HOSTNAME. 
># Use this variable to override this with another hostname, or leave empty
># to not send a hostname.
>#
>DHCLIENT_HOSTNAME_OPTION="AUTO"
>
>## Type:	string
>## Default:	""
>#
># specify a client ID ( -I option)
>#
># Specifies a client identifier string. By default the hardware address of the
># network interface is sent as client identifier string, if none is specified
># here.
>#
># Note that dhcpcd will prepend a zero to what it sends to the server. In the
># server configuration, you need to write the following to match on it:
>#  option dhcp-client-identifier "\0foo";
>#
>DHCLIENT_CLIENT_ID=""
>
>## Type:	string("dhcpcd dhclient")
>## Default:	""
>#
># specify a vendor class ID ( -i option)
>#
># Specifies the vendor class identifier string.  dhcpcd uses the default vendor
># class identifier string (system name, system release, and machine type) if it
># is not specified.
>#
>DHCLIENT_VENDOR_CLASS_ID=""
>
>## Type:	yesno
>## Default:	no
>#
># Send a DHCPRELEASE to the server (sign off the address)? (yes|no)
># This may lead to getting a different address/hostname next time an address
># is requested. But some servers require it.
>#
>DHCLIENT_RELEASE_BEFORE_QUIT="no"
>
>## Type:	string
>## Default:	""
>#
># Run this script when the interface is brought up, down, or the IP address
># changes ( -c option)
>#
># Per default, /etc/sysconfig/network/scripts/dhcpcd-hook is run.
># To disable this functionality altogether you can enter "/bin/true" here.
>#
>DHCLIENT_SCRIPT_EXE=""
>
>## Type:	yesno
>## Default	yes
>#
># Force dhcpcd to calculate UDP checksum on received packets. (yes|no)
># This corresponds to dhcpcd's -C option.
>#
>DHCLIENT_UDP_CHECKSUM="yes"
>
>## Type:	string
>## Default:	""
>#
># additional options, e.g. "-B"
>#
>DHCLIENT_ADDITIONAL_OPTIONS=""
>
>## Type:	integer
>## Default:	0
>#
># Some interfaces need time to initialize. Add the latency time in seconds
># so these can be handled properly. Should probably set per interface rather than here.
>#
>DHCLIENT_SLEEP="0"
>
>## Type:	integer
>## Default:	5
>#
># When the DHCP client is started at boot time, the boot process will stop
># until the interface is successfully configured, but at most for
># DHCLIENT_WAIT_AT_BOOT seconds.
>#
>DHCLIENT_WAIT_AT_BOOT="5"
>## Type:	yesno
>## Default:	yes
>#
># Should the DHCP client modify /etc/samba/dhcp.conf? 
>#
>DHCLIENT_MODIFY_SMB_CONF="yes"
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/sysconfig/network/dhcp</file_path>
>      <file_permissions>a=r</file_permissions>
>    </file>
>    <file>
>      <file_contents><![CDATA[#
># $Id: server.scsi.raid1,v 1.4 2005/12/19 18:02:24 edgar Exp edgar $
># This is the default sudoers file for DHAP.
>#
>
>Defaults mail_no_user, mail_no_host, mail_no_perms, tty_tickets, lecture, \
>!root_sudo, log_host, log_year, insults, !set_logname, \
>timestamp_timeout=4, passwd_timeout=4, syslog=local2, \
>!set_home
>
>##########Disruptor and sabertooth are going to have restricted sudo as is PDC
>Host_Alias      OPERATIONS = disruptor,sabertooth
>
>Host_Alias      PBX = shark,bass
>Host_Alias      SIMFARM = pris, varont, wbsrv01, wbsrv02, wlsrv01, wlsrv02, authsrv01, dbsrv01, dbsrv02, adsrv01
>
># For routelogics
>Host_Alias	RLHOSTS = pig, xx
>
># User alias specs
>
># Users in professional IT
>User_Alias	TWMUSERS = %profsa
>
># Users dealing with routelogics
>User_Alias	RLUSERS = %routelogics
>
># User privilege specification
>Cmnd_Alias      TWM_PASS_ACCESS = /bin/su -c /local/admin/scripts/.p/TWM/viewit, /bin/su -c /local/admin/scripts/.p/TWM/editit
>
>Cmnd_Alias	APACHE = /sbin/service httpd restart, /sbin/service httpd stop, /sbin/service httpd status, /sbin/service httpd starr
>
>################### SYSAD RESTRICTED #######################
># Not all sysads can do things on the PDCs or PBX's
># These people restricted from operations and the PBX's
>julie ALL, !OPERATIONS, !PBX = ALL
>
>################### Wheel group #################
># People in LOCAL wheel group can sudo
># This is intended so desktop machines can have their
># owners put into the wheel group and so get sudo
># w/o having to edit the sudoers file
>root	ALL = (ALL) ALL
>%wheel	ALL = (ALL) ALL
># Global wheel group is so sysads that get access
># to all machines do not need to be added to wheel
># group. i.e. on user desktops, don't have to modify
># the /etc/group file for sysads, just for end users.
>%gwheel	ALL = (ALL) ALL
>
>################### Others #######################
>
>TWMUSERS	zebra = (autouser,wls8) ALL
>TWMUSERS	llama = TWM_PASS_ACCESS
>
># For routelogics
>RLUSERS		RLHOSTS = (root) APACHE
>]]></file_contents>
>      <file_owner>root:root</file_owner>
>      <file_path>/etc/sudoers</file_path>
>      <file_permissions>u=w,g=r,o=</file_permissions>
>    </file>
>  </files>
>  <firewall>
>    <FW_ALLOW_FW_BROADCAST_DMZ>no</FW_ALLOW_FW_BROADCAST_DMZ>
>    <FW_ALLOW_FW_BROADCAST_EXT>no</FW_ALLOW_FW_BROADCAST_EXT>
>    <FW_ALLOW_FW_BROADCAST_INT>no</FW_ALLOW_FW_BROADCAST_INT>
>    <FW_DEV_DMZ></FW_DEV_DMZ>
>    <FW_DEV_EXT>any</FW_DEV_EXT>
>    <FW_DEV_INT></FW_DEV_INT>
>    <FW_FORWARD_MASQ></FW_FORWARD_MASQ>
>    <FW_IGNORE_FW_BROADCAST_DMZ>no</FW_IGNORE_FW_BROADCAST_DMZ>
>    <FW_IGNORE_FW_BROADCAST_EXT>yes</FW_IGNORE_FW_BROADCAST_EXT>
>    <FW_IGNORE_FW_BROADCAST_INT>no</FW_IGNORE_FW_BROADCAST_INT>
>    <FW_IPSEC_TRUST>no</FW_IPSEC_TRUST>
>    <FW_LOG_ACCEPT_ALL>no</FW_LOG_ACCEPT_ALL>
>    <FW_LOG_ACCEPT_CRIT>yes</FW_LOG_ACCEPT_CRIT>
>    <FW_LOG_DROP_ALL>no</FW_LOG_DROP_ALL>
>    <FW_LOG_DROP_CRIT>yes</FW_LOG_DROP_CRIT>
>    <FW_MASQUERADE>no</FW_MASQUERADE>
>    <FW_PROTECT_FROM_INT>no</FW_PROTECT_FROM_INT>
>    <FW_ROUTE>no</FW_ROUTE>
>    <FW_SERVICES_DMZ_IP></FW_SERVICES_DMZ_IP>
>    <FW_SERVICES_DMZ_RPC></FW_SERVICES_DMZ_RPC>
>    <FW_SERVICES_DMZ_TCP></FW_SERVICES_DMZ_TCP>
>    <FW_SERVICES_DMZ_UDP></FW_SERVICES_DMZ_UDP>
>    <FW_SERVICES_EXT_IP></FW_SERVICES_EXT_IP>
>    <FW_SERVICES_EXT_RPC></FW_SERVICES_EXT_RPC>
>    <FW_SERVICES_EXT_TCP>ssh</FW_SERVICES_EXT_TCP>
>    <FW_SERVICES_EXT_UDP></FW_SERVICES_EXT_UDP>
>    <FW_SERVICES_INT_IP></FW_SERVICES_INT_IP>
>    <FW_SERVICES_INT_RPC></FW_SERVICES_INT_RPC>
>    <FW_SERVICES_INT_TCP></FW_SERVICES_INT_TCP>
>    <FW_SERVICES_INT_UDP></FW_SERVICES_INT_UDP>
>    <enable_firewall config:type="boolean">false</enable_firewall>
>    <start_firewall config:type="boolean">false</start_firewall>
>  </firewall>
>  <general>
>    <clock>
>      <hwclock>UTC</hwclock>
>      <timezone>US/Pacific</timezone>
>    </clock>
>    <keyboard>
>      <keymap>english-us</keymap>
>    </keyboard>
>    <language>en_US</language>
>    <mode>
>      <confirm config:type="boolean">true</confirm>
>    </mode>
>    <mouse>
>      <id>probe</id>
>    </mouse>
>  </general>
>  <ldap>
>    <base_config_dn>ou=ldapconfig,dc=dhapdigital,dc=com</base_config_dn>
>    <bind_dn></bind_dn>
>    <create_ldap config:type="boolean">false</create_ldap>
>    <file_server config:type="boolean">false</file_server>
>    <ldap_domain>dc=dhapdigital,dc=com</ldap_domain>
>    <ldap_server>mantaray.sf.dhapdigital.com</ldap_server>
>    <ldap_tls config:type="boolean">true</ldap_tls>
>    <ldap_v2 config:type="boolean">false</ldap_v2>
>    <member_attribute>member</member_attribute>
>    <nss_base_group>ou=groups,dc=dhapdigital,dc=com</nss_base_group>
>    <nss_base_passwd>ou=people,dc=dhapdigital,dc=com</nss_base_passwd>
>    <nss_base_shadow>ou=people,dc=dhapdigital,dc=com</nss_base_shadow>
>    <pam_password>crypt</pam_password>
>    <start_autofs config:type="boolean">true</start_autofs>
>    <start_ldap config:type="boolean">true</start_ldap>
>  </ldap>
>  <mail>
>    <connection_type config:type="symbol">permanent</connection_type>
>    <from_header>dhapdigital.com</from_header>
>    <listen_remote config:type="boolean">false</listen_remote>
>    <mta config:type="symbol">postfix</mta>
>    <outgoing_mail_server>smtp.dhapdigital.com</outgoing_mail_server>
>    <postfix_mda config:type="symbol">local</postfix_mda>
>    <use_amavis config:type="boolean">false</use_amavis>
>  </mail>
>  <networking>
>    <dhcp_options>
>      <dhclient_hostname_option>AUTO</dhclient_hostname_option>
>    </dhcp_options>
>    <dns>
>      <dhcp_hostname config:type="boolean">true</dhcp_hostname>
>      <dhcp_resolv config:type="boolean">true</dhcp_resolv>
>      <domain>dhapdigital.com</domain>
>      <hostname>FIXME</hostname>
>    </dns>
>    <routing>
>      <ip_forward config:type="boolean">false</ip_forward>
>    </routing>
>  </networking>
>  <online_update>
>    <autoget config:type="boolean">true</autoget>
>    <enable_autoupdate config:type="boolean">true</enable_autoupdate>
>    <skipPre config:type="boolean">true</skipPre>
>    <update_time>
>      <day config:type="integer">0</day>
>      <hour config:type="integer">0</hour>
>      <minute config:type="integer">0</minute>
>      <random_time config:type="boolean">true</random_time>
>      <timing>daily</timing>
>    </update_time>
>  </online_update>
>  <partitioning config:type="list">
>    <drive>
>      <device>/dev/md</device>
>      <initialize config:type="boolean">false</initialize>
>      <partitions config:type="list">
>        <partition>
>          <filesystem config:type="symbol">ext3</filesystem>
>          <format config:type="boolean">true</format>
>          <fstopt>noatime,acl</fstopt>
>          <mount>/</mount>
>          <partition_id config:type="integer">131</partition_id>
>          <partition_nr config:type="integer">0</partition_nr>
>          <raid_options>
>            <persistent_superblock config:type="boolean">true</persistent_superblock>
>            <chunk_size>4</chunk_size>
>            <raid_type>raid1</raid_type>
>          </raid_options>
>        </partition>
>        <partition>
>          <filesystem config:type="symbol">ext3</filesystem>
>          <format config:type="boolean">true</format>
>          <fstopt>noatime,acl,nosuid,nodev,noexec</fstopt>
>          <mount>/var</mount>
>          <partition_id config:type="integer">131</partition_id>
>          <partition_nr config:type="integer">1</partition_nr>
>          <raid_options>
>            <persistent_superblock config:type="boolean">true</persistent_superblock>
>            <chunk_size>4</chunk_size>
>            <raid_type>raid1</raid_type>
>          </raid_options>
>        </partition>
>        <partition>
>          <filesystem config:type="symbol">ext3</filesystem>
>          <format config:type="boolean">true</format>
>          <fstopt>noatime,acl,nodev</fstopt>
>          <mount>/usr</mount>
>          <partition_id config:type="integer">131</partition_id>
>          <partition_nr config:type="integer">2</partition_nr>
>          <raid_options>
>            <persistent_superblock config:type="boolean">true</persistent_superblock>
>            <chunk_size>4</chunk_size>
>            <raid_type>raid1</raid_type>
>          </raid_options>
>        </partition>
>      </partitions>
>      <use>all</use>
>    </drive>
>    <drive>
>      <device>/dev/sda</device>
>      <initialize config:type="boolean">false</initialize>
>      <partitions config:type="list">
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md0</raid_name>
>          <raid_type>raid</raid_type>
>          <size>6gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <filesystem config:type="symbol">swap</filesystem>
>          <format config:type="boolean">true</format>
>          <mount>swap</mount>
>          <partition_id config:type="integer">130</partition_id>
>          <size>1gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md1</raid_name>
>          <raid_type>raid</raid_type>
>          <size>4gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md2</raid_name>
>          <raid_type>raid</raid_type>
>          <size>max</size>
>          <partition_type>primary</partition_type>
>        </partition>
>      </partitions>
>      <use>all</use>
>    </drive>
>    <drive>
>      <device>/dev/sdb</device>
>      <initialize config:type="boolean">false</initialize>
>      <partitions config:type="list">
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md0</raid_name>
>          <raid_type>raid</raid_type>
>          <size>6gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <filesystem config:type="symbol">swap</filesystem>
>          <format config:type="boolean">true</format>
>          <mount>swap</mount>
>          <partition_id config:type="integer">130</partition_id>
>          <size>1gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md1</raid_name>
>          <raid_type>raid</raid_type>
>          <size>4gb</size>
>          <partition_type>primary</partition_type>
>        </partition>
>        <partition>
>          <format config:type="boolean">false</format>
>          <partition_id config:type="integer">253</partition_id>
>          <raid_name>/dev/md2</raid_name>
>          <raid_type>raid</raid_type>
>          <size>max</size>
>          <partition_type>primary</partition_type>
>        </partition>
>      </partitions>
>      <use>all</use>
>    </drive>
>  </partitioning>
>  <printer>
>    <cups_installation config:type="symbol">client</cups_installation>
>    <default></default>
>    <printcap config:type="list"/>
>    <server_hostname>cups.sf.dhapdigital.com</server_hostname>
>    <spooler>cups</spooler>
>  </printer>
>  <report>
>    <errors>
>      <log config:type="boolean">true</log>
>      <show config:type="boolean">true</show>
>      <timeout config:type="integer">0</timeout>
>    </errors>
>    <messages>
>      <log config:type="boolean">true</log>
>      <show config:type="boolean">true</show>
>      <timeout config:type="integer">0</timeout>
>    </messages>
>    <warnings>
>      <log config:type="boolean">true</log>
>      <show config:type="boolean">true</show>
>      <timeout config:type="integer">0</timeout>
>    </warnings>
>    <yesno_messages>
>      <log config:type="boolean">true</log>
>      <show config:type="boolean">true</show>
>      <timeout config:type="integer">0</timeout>
>    </yesno_messages>
>  </report>
>  <runlevel>
>    <default>3</default>
>  </runlevel>
>  <security>
>    <console_shutdown>reboot</console_shutdown>
>    <cracklib_dict_path>/usr/lib/cracklib_dict</cracklib_dict_path>
>    <cwd_in_root_path>no</cwd_in_root_path>
>    <cwd_in_user_path>no</cwd_in_user_path>
>    <displaymanager_remote_access>no</displaymanager_remote_access>
>    <enable_sysrq>no</enable_sysrq>
>    <fail_delay>3</fail_delay>
>    <gid_max>19999</gid_max>
>    <gid_min>10000</gid_min>
>    <group_encryption>des</group_encryption>
>    <kdm_shutdown>local</kdm_shutdown>
>    <lastlog_enab>yes</lastlog_enab>
>    <obscure_checks_enab>yes</obscure_checks_enab>
>    <pass_max_days>99999</pass_max_days>
>    <pass_min_days>0</pass_min_days>
>    <pass_min_len>12</pass_min_len>
>    <pass_warn_age>7</pass_warn_age>
>    <passwd_encryption>blowfish</passwd_encryption>
>    <passwd_use_cracklib>yes</passwd_use_cracklib>
>    <permission_security>secure</permission_security>
>    <run_updatedb_as>nobody</run_updatedb_as>
>    <system_gid_max>499</system_gid_max>
>    <system_gid_min>100</system_gid_min>
>    <system_uid_max>499</system_uid_max>
>    <system_uid_min>100</system_uid_min>
>    <uid_max>29999</uid_max>
>    <uid_min>20000</uid_min>
>    <useradd_cmd>/usr/sbin/useradd.local</useradd_cmd>
>    <userdel_postcmd>/usr/sbin/userdel-post.local</userdel_postcmd>
>    <userdel_precmd>/usr/sbin/userdel-pre.local</userdel_precmd>
>  </security>
>  <software>
>    <addons config:type="list">
>      <addon>Min</addon>
>    </addons>
>    <base>Minimal</base>
>    <packages config:type="list">
>      <package>dosfstools</package>
>      <package>bonnie++</package>
>      <package>cpufrequtils</package>
>      <package>cpuspeed</package>
>      <package>findutils-locate</package>
>      <package>cups-client</package>
>      <package>cups-libs</package>
>      <package>dante</package>
>      <package>db-utils</package>
>      <package>chkrootkit</package>
>      <package>dhcp</package>
>      <package>dhcp-client</package>
>      <package>atftp</package>
>      <package>dhcp-tools</package>
>      <package>autoconf</package>
>      <package>autofs</package>
>      <package>automake</package>
>      <package>diffstat</package>
>      <package>autoyast2-utils</package>
>      <package>bacula</package>
>      <package>fping</package>
>      <package>dirdiff</package>
>      <package>fetchmail</package>
>      <package>dos2unix</package>
>      <package>icmpinfo</package>
>      <package>iftop</package>
>      <package>ipgrab</package>
>      <package>ippl</package>
>      <package>iptraf</package>
>      <package>irqbalance</package>
>      <package>libjpeg</package>
>      <package>libnet</package>
>      <package>libnetpbm</package>
>      <package>libpcap</package>
>      <package>libpng</package>
>      <package>libtiff</package>
>      <package>lynx</package>
>      <package>m4</package>
>      <package>makewhat</package>
>      <package>mkisofs</package>
>      <package>mt_st</package>
>      <package>mtr</package>
>      <package>nagios-nrpe</package>
>      <package>nagios-plugins</package>
>      <package>perl-Crypt-DES</package>
>      <package>perl-Digest-HMAC</package>
>      <package>perl-Net-SNMP</package>
>      <package>ncftp</package>
>      <package>net-snmp</package>
>      <package>netacct</package>
>      <package>netdiag</package>
>      <package>netpbm</package>
>      <package>nmap</package>
>      <package>nss_ldap</package>
>      <package>nttcp</package>
>      <package>pam_ldap</package>
>      <package>patch</package>
>      <package>pax</package>
>      <package>perl-HTML-Parser</package>
>      <package>perl-HTML-Tagset</package>
>      <package>perl-TermReadKey</package>
>      <package>perl-URI</package>
>      <package>perl-libwww-perl</package>
>      <package>pine</package>
>      <package>pwgen</package>
>      <package>python</package>
>      <package>quilt</package>
>      <package>quota</package>
>      <package>rcs</package>
>      <package>rdiff-backup</package>
>      <package>rdist</package>
>      <package>rsaref</package>
>      <package>rsync</package>
>      <package>rtstools</package>
>      <package>scanlogd</package>
>      <package>screen</package>
>      <package>seccheck</package>
>      <package>sgrep</package>
>      <package>sharutils</package>
>      <package>smartmontools</package>
>      <package>ssldump</package>
>      <package>star</package>
>      <package>strace</package>
>      <package>sudo</package>
>      <package>tcl</package>
>      <package>tcpdump</package>
>      <package>traffic-vis</package>
>      <package>ulimit</package>
>      <package>unzip</package>
>      <package>urlview</package>
>      <package>vlan</package>
>      <package>vlock</package>
>      <package>vnstat</package>
>      <package>w3mir</package>
>      <package>wdiff</package>
>      <package>wget</package>
>      <package>wiggle</package>
>      <package>wol</package>
>      <package>xinetd</package>
>      <package>xntp</package>
>      <package>yast2-firstboot</package>
>      <package>yast2-instserver</package>
>      <package>yast2-printer</package>
>      <package>zip</package>
>      <package>zisofs-tools</package>
>    </packages>
>  </software>
>  <user_defaults>
>    <group>100</group>
>    <groups>video</groups>
>    <home>/home</home>
>    <inactive>-1</inactive>
>    <shell>/bin/bash</shell>
>    <skel>/etc/skel</skel>
>  </user_defaults>
>  <users config:type="list">
>    <user>
>      <encrypted config:type="boolean">true</encrypted>
>      <fullname>root</fullname>
>      <gid>0</gid>
>      <home>/root</home>
>      <password_settings>
>        <inact>-1</inact>
>        <max>99999</max>
>        <min>0</min>
>        <warn>7</warn>
>      </password_settings>
>      <shell>/bin/bash</shell>
>      <uid>0</uid>
>      <user_password>$2a$05$NjYO4WZabe4Sepd3TciOWeMnDwBnXftuI1qNLFiAoiXVupmPdp1TG</user_password>
>      <username>root</username>
>    </user>
>  </users>
></profile>

Actions: View

Attachments on bug 140069: 61391 | 61392