xref: /illumos-gate/usr/src/cmd/krb5/slave/krb5_prop.xml (revision bbf21555)

<?xml version='1.0'?>
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
<!--
	Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
	Use is subject to license terms.

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.

	Service manifest for the krb5_prop service.

	kpropd can run in two modes, incremental and nonincremental:
		the new mode of incremental propagation
			actively polls for updates from the master KDC

		the old mode of nonincremental
			passively receives full propagations from the master KDC

	refer to kdc.conf(5) to configure incremental or nonincremental modes
-->

<service_bundle type='manifest' name='SUNWkdcr:kpropd'>

<service
	name='network/security/krb5_prop'
	type='service'
	version='1'>

	<create_default_instance enabled='false' />

	<dependency
		name='dns'
		grouping='require_all'
		restart_on='error'
		type='service'>
		<service_fmri value='svc:/network/dns/client' />
	</dependency>

	<exec_method
		type='method'
		name='start'
		exec='/usr/lib/krb5/kpropd -S'
		timeout_seconds='60'>
		<method_context>
			<method_credential
				user='root'
				group='other'
				privileges='basic,!file_link_any,!proc_info,!proc_session,net_privaddr'
			/>
		</method_context>
	</exec_method>

	<exec_method
		type='method'
		name='stop'
		exec=':kill'
		timeout_seconds='60' />

	<stability value='Unstable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
			Kerberos propagation daemon for slave KDCs
			</loctext>
		</common_name>
		<documentation>
			<manpage title='kpropd' section='8'
			    manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>