/usr/share/ipa/ipakrb5.aug is in freeipa-server 4.7.0~pre1+git20180411-2ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 | module IPAKrb5 =
autoload xfm
let dels (s:string) = Util.del_str s
let indent = Util.indent
let space = Sep.space
let opt_space = Sep.opt_space
let sep = Sep.space_equal
let eol = IniFile.eol
let kw = Rx.word
let val = Rx.space_in
let comment = IniFile.comment IniFile.comment_re "# "
let empty = IniFile.empty
let entry_generic (v:lens) = [ indent . key kw . sep . v . eol ]
(*
FIXME: combine entry and subrecord into a single recursive lens
This does not work for some reason:
let rec entry = entry_generic ( store ( val - "{" ) )
| entry_generic ( dels "{" . eol
. ( entry | comment | empty )*
. indent . dels "}" )
*)
let entry = entry_generic ( store ( val - "{" ) )
let subrecord = entry_generic ( dels "{" . eol
. ( entry | comment | empty )*
. indent . dels "}" )
let title = IniFile.indented_title kw
let record = IniFile.record title ( entry | subrecord | comment )
let directive = Build.key_value_line kw space ( store val )
let lns = IniFile.lns record ( directive | comment )
let filter = incl "/etc/krb5.conf"
. incl "/etc/krb5.conf.d/*"
. incl "/var/kerberos/krb5kdc/kdc.conf"
. Util.stdexcl
let xfm = transform lns filter
|