# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/F-nokrb5,v 1.6 2025/10/31 18:22:33 pb22 Exp $
# No KRB5 (so no Lab authentication), but does have LDAP (things for DMZ etc should be in F-noldap)
@F-noldap

# LDAP
P-etc-ldap.conf
P-etc-ldap.conf-ubuntu
P-etc-ldap.conf-ubuntu-20
P-openldap-ldap.conf
P-ldap-ldap.conf
P-ldap.conf-null-uri-ubuntu
P-etc_libnss-ldap.conf
P-etc_pam_ldap.conf
P-etc-nsswitch.conf
P-etc-nsswitch.conf-ubuntu
P-etc-nsswitch.conf-U18
P-etc-nsswitch.conf-U20
P-etc-nsswitch.conf-U24
P-ldap.conf-pam_groupdn
P-pam-sys-auth-ac-500-ldap
P-pam-sys-auth-backstop-500
P-pam-password-auth-ac-500
P-pam-sys-auth-backstop-ldap

## allow sysadmin to run any sudo command
# use sudoers.d/ P-sudoers-krb5-U
# use sudoers.d/ P-sudoers-krb5

## We now use sysadmin
# P-sudoers-staff2sysadmin
# P-sudoers-staff2sysadmin-2

# HACK to ensure that LDAP users can login, and disable guest
P-lightdm.conf

# HACKs to try to avoid system use of uids 101 and 104 on U16.04 and later
P-passwd-low-ids-syslog
P-passwd-low-ids-apt
