###
###  Copyright 2000-2007 University of Illinois Board of Trustees
###  All rights reserved. 
###
###  platform-rhel3.conf - Linux-specific Configuration (RedHat EL 3)
###
###  Campus Information Technologies and Educational Services
###  University of Illinois at Urbana-Champaign
###

### More default shells
shells [
	"/bin/bash",
	"/bin/tcsh",
	"/bin/zsh"
];

### default path
path [
	"/usr/bin",
	"/bin",
	"/usr/X11R6/bin"
];

### man path
manpath [
	"/usr/share/man",
	"/usr/X11R6/man"
];

### inittab configurations
inittab_enable yes;
inittab_actions [ 
	respawn,
	wait,
	once,
	boot,
	bootwait,
	off,
	ondemand,
	initdefault,
	sysinit,
	powerwait,
	powerfail,
	powerokwait,
	powerfailnow,
	ctrlaltdel,
	kbrequest
];
inittab [
	[ id, 3, initdefault, "" ],
	[ si, "", sysinit, "/etc/rc.d/rc.sysinit" ],
	[ l0, 0, wait, "/etc/rc.d/rc 0" ],
	[ l1, 1, wait, "/etc/rc.d/rc 1" ],
	[ l2, 2, wait, "/etc/rc.d/rc 2" ],
	[ l3, 3, wait, "/etc/rc.d/rc 3" ],
	[ l4, 4, wait, "/etc/rc.d/rc 4" ],
	[ l5, 5, wait, "/etc/rc.d/rc 5" ],
	[ l6, 6, wait, "/etc/rc.d/rc 6" ],
	[ ca, "", ctrlaltdel, "/sbin/shutdown -t3 -r now" ],
	[ pf, "", powerfail, 
		"/sbin/shutdown -f -h +2 \"Power Failure; System Shutting Down\"" ],
	[ pr, 12345, powerokwait, 
		"/sbin/shutdown -c \"Power Restored; Shutdown Cancelled\"" ],
	[ 1, 2345, respawn, "/sbin/mingetty tty1" ],
	[ 2, 2345, respawn, "/sbin/mingetty tty2" ],
	[ 3, 2345, respawn, "/sbin/mingetty tty3" ],
	[ 4, 2345, respawn, "/sbin/mingetty tty4" ],
	[ 5, 2345, respawn, "/sbin/mingetty tty5" ],
	[ 6, 2345, respawn, "/sbin/mingetty tty6" ],
	[ x, 5, respawn, "/etc/X11/prefdm -nodaemon" ]
];


### List of packages to install, but we have different names.
pkg_install_list->set {
	perl,
	gdbm,
	"perl-Filter",
	"perl-AppConfig",			# For Action::GenerateFile::AppConfig
	"perl-Config-Objective",
	"perl-ParseLex",
	"perl-Parse-Yapp",
	"perl-NetAddr-IP",
	"perl-Proc-ProcessTable",	# For Action::RestartDaemon
	"perl-Algorithm-Diff",		# For perl-Text-Diff
	"perl-Text-Diff",			# For Action::File & Action::Crontab
	"perl-Unix-Mknod",			# For Action::MkNod
	"perl-version",			# For Action::PackageManager
							# (will be part of perl-5.10)
	psgconf,
	"redhat-release",
	"redhat-logos"
};

### Some variables to help parse RPM package names
pkg_seperator->set [ "-", "-" ];
pkg_seperator_regex->set [ "[^-]*", "[^-]*" ];

### Rstatd Packages
rstatd_packages [ "rusers-server", portmap ];

### NTP Configurations
ntp_packages [ libcap ];
ntp_driftfile "/var/lib/ntp/drift";
ntp_user "ntp";
ntp_group "ntp";

### sshd config
ssh_packages->set [ openssl, openssh, "openssh-clients", "krb5-libs", zlib ];
ssh_options->delete ForwardX11Trusted;
sshd_packages->set [ openssl, openssh, "openssh-server", "krb5-libs", zlib ];
sshd_config_dir "/etc/ssh";
sshd_subsystems {
  sftp => "/usr/libexec/openssh/sftp-server"
};

### PostgreSQL configurations
postgresql_packages [ "postgresql-server" ];

### RedHat Network configurations
rhn_packages [
	chkconfig,		e2fsprogs,	elfutils,			"elfutils-libelf",
	gdbm,			gmp,			gnupg,			glibc,
	glib2,			"gpg-pubkey",	libtermcap,		libxml2,
	"libxml2-python",	mkinitrd,		ncurses,			newt,
	perl,			pyOpenSSL,	python,			pyxf86config,
	readline,			rhnlib,		rhpl,			"rpm-python",
	slang,			up2date
];
gpg_keys [ 
	"db42a60e"					# RedHat GPG Key
];

rc_scripts {
	rhnsd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	}
};
rhn_config {
	"useNoSSLForPackages[comment]" =>
		"Use the noSSLServerURL for package, package list, and header fetching",
	useNoSSLForPackages => 0,
	"storageDir[comment]" => 
		"Where to store packages and other data when they are retrieved",
	storageDir => "/var/spool/up2date",
	"pkgSkipList[comment]" => 
		"A list of package names, optionally including wildcards, to skip",
	pkgSkipList => "kernel*;",
	"retrieveOnly[comment]" => "Retrieve packages only",
	retrieveOnly => 0,
	"noSSLServerURL[comment]" => "Remote server URL without SSL",
	noSSLServerURL => "http://xmlrpc.rhn.redhat.com/XMLRPC",
	"networkSetup[comment]" => "None",
	networkSetup => 1,
	"networkRetries[comment]" =>
		"Number of attempts to make at network connections before giving up",
	networkRetries => 5,
	"pkgsToInstallNotUpdate[comment]" => 
		"A list of provides names or package names of packages to install not update",
	pkgsToInstallNotUpdate => "kernel;kernel-modules;kernel-devel;",
	"enableProxy[comment]" => "Use a HTTP Proxy",
	enableProxy => 0,
	"noBootLoader[comment]" => 
		"To disable modification of the boot loader (lilo, silo, etc)",
	noBootLoader => 0,
	"proxyPassword[comment]" => "The password to use for an authenticated proxy",
	proxyPassword => "",
	"updateUp2date[comment]" => "Allow up2date to update itself when possible",
	updateUp2date => 1,
	"keepAfterInstall[comment]" => "Keep packages on disk after installation",
	keepAfterInstall => 0,
	"useGPG[comment]" => "Use GPG to verify package integrity",
	useGPG => 1,
	"headerCacheSize[comment]" => 
		"The maximum number of rpm headers to cache in ram",
	headerCacheSize => 40,
	"forceInstall[comment]" => 
		"Force package installation, ignoring package, file and config file skip list",
	forceInstall => 0,
	"systemIdPath[comment]" => "Location of system id",
	systemIdPath => "/etc/sysconfig/rhn/systemid",
	"retrieveSource[comment]" => "Retrieve source RPM along with binary package",
	retrieveSource => 0,
	"enableRollbacks[comment]" =>
		"Determine if up2date should create rollback rpms",
	enableRollbacks => 0,
	"gpgKeyRing[comment]" =>
		"The location of the gpg keyring to use for package checking",
	gpgKeyRing => "/etc/sysconfig/rhn/up2date-keyring.gpg",
	"adminAddress[comment]" =>
		"List of e-mail addresses for update agent to communicate with when run in batch mode",
	adminAddress => "root@localhost;",
	"serverURL[comment]" => "Remote server URL",
	serverURL => "https://xmlrpc.rhn.redhat.com/XMLRPC",
	"fileSkipList[comment]" =>
		"A list of file names, optionally including wildcards, to skip",
	fileSkipList => ";",
	"versionOverride[comment]" =>
		"Override the automatically determined system version",
	versionOverride => "",
	"sslCACert[comment]" => "The CA cert used to verify the ssl server",
	sslCACert => "/usr/share/rhn/RHNS-CA-CERT",
	"noReplaceConfig[comment]" => 
		"When selected, no packages that would change configuration data are automatically installed",
	noReplaceConfig => 1,
	"enableProxyAuth[comment]" => "To use an authenticated proxy or not",
	enableProxyAuth => 0,
	"disallowConfChanges[comment]" =>
		"Config options that can not be overwritten by a config update action",
	disallowConfChanges => 
		"noReboot;sslCACert;useNoSSLForPackages;noSSLServerURL;serverURL;disallowConfChanges;",
	"headerFetchCount[comment]" => 
		"The maximimum number of rpm headers to fetch at once",
	headerFetchCount => 10,
	"proxyUser[comment]" =>
		"The username for an authenticated proxy",
	proxyUser => "",
	"removeSkipList[comment]" =>
		"A list of package names, optionally including wildcards that up2date will not remove",
	removeSkipList => "kernel*;",
	"debug[comment]" => "Whether or not debugging is enabled",
	debug => 0,
	"httpProxy[comment]" =>
		"HTTP proxy in host:port format, e.g. squid.redhat.com:3128",
	httpProxy => "",
	"noReboot[comment]" => "Disable the reboot actions",
	noReboot => 0
};

### Apache configurations
openssl_packages [ "mod_ssl", "krb5-libs", zlib ];
www_packages->set [ apr, distcache, expat, httpd ];
www_fcgi_packages->set [ mod_fastcgi, "perl-FCGI" ];
www_user_name "apache";
www_group_name "apache";
www_use_apache2 yes;
%if ( platform->match "x86_64" )
	www_module_dir "/usr/lib64/httpd/modules";
%else
	www_module_dir "/usr/lib/httpd/modules";
%endif
www_apachectl_path "/usr/sbin/apachectl";
www_fcgi_wrapper_path "/usr/sbin/suexec";
www_config_dir "/etc/httpd/conf";
www_mime_dir "/etc";
www_icons_dir "/var/www/icons";

# Deal with Module name changes
www_modules->replace_row_cells(
     { 0 => action },
     { 0 => actions }
);
www_modules->replace_row_cells(
     { 0 => includes },
     { 0 => include }
);
www_modules->replace_row_cells(
     { 0 => config_log },
     { 0 => log_config }
);
www_modules->replace_row_cells(
     { 0 => ssl },
     { 1 => "mod_ssl.so" }
);

# And deal with new Apache2 modules
www_modules [
     [ suexec ]
];

### NFS configuration
nfs_server_daemons [ mountd, portmap ];
nfs_client_daemons [ autofs, portmap ];
nfs_client_packages->set [ "nfs-utils", "autofs" ];
nfs_server_packages->set [ "nfs-utils" ];

### dns configuration
dns_cache_packages->set [ bind ];

### Anon FTP configuration (for vsftpd)
anon_ftp_use_vsftpd yes;
anon_ftp_ftpd_path "/usr/sbin/vsftpd";
anon_ftp_packages->set [ vsftpd ];
anon_ftp_pam_conf->set [
	"auth       required pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed",
	"auth       required pam_stack.so service=system-auth",
	"auth       required pam_shells.so",
	"account    required pam_stack.so service=system-auth",
	"session    required pam_stack.so service=system-auth"
];
anon_ftp_vsftpd_options {
	anonymous_enable		=> YES,
	local_enable			=> NO,
	write_enable			=> NO,
	anon_upload_enable		=> NO,
	anon_mkdir_write_enable	=> NO,
	anon_other_write_enable	=> NO,
	anon_world_readable_only	=> YES,
	connect_from_port_20	=> YES,
	hide_ids				=> YES,
	pasv_min_port			=> 50000,
	pasv_max_port			=> 60000,
	xferlog_enable			=> YES,
	ls_recurse_enable		=> YES,
	async_abor_enable		=> YES,
	one_process_model		=> YES,
	idle_session_timeout	=> 120,
	data_connection_timeout	=> 300,
	accept_timeout			=> 60,
	connect_timeout		=> 60
};

### Linux specific TSM Configurations
rc_echo "echo -e";
rc_scripts {
	tsmsched => {
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'",
          run_levels => {
			S => K01,
			0 => K01,
			1 => K01,
			2 => S99,
			3 => S99,
			4 => S99,
			5 => S99,
			6 => K01
		}
	}
};

### Linux specific SASL Configurations
rc_scripts {
     saslauthd => {
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'",
          run_levels => {
			2    => S80,
			3    => S80,
			4    => S80,
			5    => S80,
			0    => K30,
			1    => K30,
			6    => K30
          },  
          stop_cmd => "pkill -P 1 -x saslauthd"
     }
};   


### Name Server Switch configuration
name_service_switch {
	passwd => [ files ],
	shadow => [ files ],
	group => [ files ],
	hosts => [ files, dns ],
	bootparams => [ nisplus, "[NOTFOUND=return]", files ],
	ethers => [ files ],
	netmasks => [ files ],
	networks => [ files ],
	protocols => [ files ],
	rpc => [ files ],
	services => [ files ],
	netgroup => [ files ],
	publickey => [ nisplus ],
	automount => [ files ],
	aliases => [ files, nisplus ]
};

### Entries for inetd.conf.
use_xinetd;
inetd_packages->set [ glibc, tcp_wrappers, xinetd ];
tcp_packages->set [ tcp_wrappers ];
inetd {
  "chargen/udp"	=> {
			server	=> internal
		   },
  "chargen/tcp"	=> {
			server	=> internal
		   },
  "daytime/udp"	=> {
			server	=> internal
		   },
  "daytime/tcp"	=> {
			server	=> internal
		   },
  "discard/udp"	=> {
			server	=> internal
		   },
  "discard/tcp"	=> {
			server	=> internal
		   },
  "echo/udp"	=> {
			server	=> internal
		   },
  "echo/tcp"	=> {
			server	=> internal
		   },
  "time/udp"	=> {
			server	=> internal
		   },
  "time/tcp"	=> {
			server	=> internal
		   }
};

### Startup scripts to disable.

list_rc_scripts_cmd "/sbin/chkconfig --list | awk '$1 !~ /:$/ {print $1}'";

rc_scripts {
	aep1000 => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	apmd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	atd => {
		state => enable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	audit => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	autofs => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	bcm5820 => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	crond => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	cups => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	dc_client => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	dc_server => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	gpm => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	hpoj => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	ip6tables => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	iptables => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	irda => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	irqbalance => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	isdn => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	kudzu => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	httpd => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --level 2345 %s on",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --level 01234567 %s off",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	lisa => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	mdmonitor => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	mdmpd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	microcode_ctl => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	netdump => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	netfs => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	network => {
		state => enable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	nfs => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	nfslock => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	nscd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	ntpd => {
		state => ignore,
		fullname => "/etc/init.d/ntpd",
		enable_cmd => "/sbin/chkconfig --level 2345 %s on",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --level 01234567 %s off",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	pcmcia => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	portmap => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	psacct => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	random => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	rawdevices => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	smartd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	smb => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --level 2345 %s on",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --level 01234567 %s off",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	snmpd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	snmptrapd => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	spamassassin => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	squid => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	sshd => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	syslog => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	sysstat => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	vncserver => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	winbind => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	xfs => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	xinetd => {
		state => ignore,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	},
	ypbind => {
		state => disable,
		enable_cmd => "/sbin/chkconfig --add %s",
		enable_test => "/sbin/chkconfig --list %s 2>&1 | grep -q ':on'",
		disable_cmd => "/sbin/chkconfig --del %s",
		disable_test => "/sbin/chkconfig --list %s 2>&1 | grep -vq ':on'"
	}
};

### root crontab entries
cron_use_vixie yes;
cron_vixie_header "
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/
";
crontab_dir "/var/spool/cron";
cron_packages->set [ crontabs, "vixie-cron" ];
crontabs {
  root	=> [
		{
			type => vixie,
			minute	=> 1,
			command	=> "run-parts /etc/cron.hourly"
		},
		{
			type => vixie,
			minute	=> 2,
			hour	=> 4,
			command	=> "run-parts /etc/cron.daily"
		},
		{
			type => vixie,
			minute	=> 22,
			hour	=> 4,
			dow	=> 0,
			command	=> "run-parts /etc/cron.weekly"
		},
		{
			type => vixie,
			minute	=> 42,
			hour	=> 4,
			dom	=> 1,
			command	=> "run-parts /etc/cron.monthly"
		}
	]
};

### Path to dsm.opt and dsm.sys
tsm_config_dir "/opt/tivoli/tsm/client/ba/bin";
tsm_packages->set [ "compat-libstdc++", "TIVsm-API", "TIVsm-BA" ];
tsm_df_command "/bin/df -P";

### Path to pidfiles
pidfile_dir "/var/run";

### Syslog configation additions
syslog_packages-> set [ logrotate, sysklogd ];
syslog {
	"boot.log"	=> "local7.info",
	cron			=> "cron.info"
};
logrotate_enable yes;
logrotate_options {
	daily,
	create,
	compress,
	rotate	=> 14
};
logrotate_files {
	"/var/log/wtmp" => {
		monthly,
		nocompress,
		create => "0644 root utmp",
		rotate => 12
	}
};

### override sendmail settings for Linux
sendmail_ostype "linux";
sendmail_queue_mode 0700;
sendmail_mta_group "mail";
sendmail_msa_uid 51;
sendmail_msa_gid 51;
sendmail_options {
	ALIAS_FILE		=> "/etc/aliases",
	DATABASE_MAP_TYPE	=> hash
};
sendmail_m4_dir "/usr/share/sendmail-cf";
sendmail_packages->set [
	"cyrus-sasl",
	"cyrus-sasl-md5",
	gdbm,
	hesiod,
	m4,
	openldap,
	openssl,
	procmail,
	"sendmail-cf",
	sendmail
];

### PAM configuration
pam_enable yes;
pam_directory yes;
pam_packages->set [
	cracklib,
	"cracklib-dicts",
	db4,
	mktemp,
	pam
];

pam_conf { chfn => [
    "auth       sufficient   pam_rootok.so",
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth"
]};

pam_conf { chsh => [
    "auth       sufficient   pam_rootok.so",
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth"
]};

pam_conf { crond => [
     "auth       sufficient pam_rootok.so",
     "auth       required   pam_stack.so service=system-auth",
     "auth       required   pam_env.so",
     "account    required   pam_stack.so service=system-auth",
     "session    required   pam_limits.so",
     "session    optional   pam_krb5.so"
]};

pam_conf { dateconfig => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { halt => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so"
]};

pam_conf { "internet-druid" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient	pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional	pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { kbdrate => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so"
]};

pam_conf { kde => [
    "auth       required	pam_stack.so service=system-auth",
    "auth       required	pam_nologin.so",
    "auth       sufficient	pam_timestamp.so",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth",
    "session    optional	pam_timestamp.so",
    "session    optional	pam_console.so"
]};

pam_conf { kppp => [
    "auth	sufficient	pam_rootok.so",
    "auth	sufficient	pam_timestamp.so",
    "auth	required	pam_stack.so service=system-auth",
    "session	optional	pam_xauth.so",
    "session	optional	pam_timestamp.so",
    "account	required	pam_permit.so"
]};

pam_conf { kscreensaver => [
    "auth	required	pam_stack.so service=system-auth"
]};

pam_conf { login => [
    "auth       required	pam_securetty.so",
    "auth       required	pam_stack.so service=system-auth",
    "auth       required	pam_nologin.so",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth",
    "session    optional	pam_console.so"
]};

pam_conf { neat => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient	pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional	pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { other => [
    "auth     required       /lib/security/$ISA/pam_deny.so",
    "account  required       /lib/security/$ISA/pam_deny.so",
    "password required       /lib/security/$ISA/pam_deny.so",
    "session  required       /lib/security/$ISA/pam_deny.so"
]};

pam_conf { passwd => [
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth"
]};

pam_conf { poweroff => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so"
]};

pam_conf { ppp => [
    "auth       required	pam_nologin.so",
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth"
]};

pam_conf { "printconf-gui" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient	pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional	pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { printtool => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "account    required	pam_permit.so"
]};

pam_conf { reboot => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so"
]};

pam_conf { "redhat-config-date" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "redhat-config-printer-gui" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient	pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional	pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "redhat-config-time" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "redhat-config-users" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient	pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional	pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { rhn_register => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { serviceconf => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { smtp => [
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth"
]};

pam_conf { sshd => [
    "auth       required     pam_stack.so service=system-auth",
    "auth       required     pam_nologin.so",
    "account    required     pam_stack.so service=system-auth",
    "password   required     pam_stack.so service=system-auth",
    "session    required     pam_stack.so service=system-auth",
    "session    required     pam_limits.so",
    "session    optional     pam_console.so"
]};

pam_conf { su => [
    "auth       sufficient	/lib/security/$ISA/pam_rootok.so",
    "auth       required	/lib/security/$ISA/pam_stack.so service=system-auth",
    "account    required	/lib/security/$ISA/pam_stack.so service=system-auth",
    "password   required	/lib/security/$ISA/pam_stack.so service=system-auth",
    "session    required	/lib/security/$ISA/pam_stack.so service=system-auth",
    "session    optional	/lib/security/$ISA/pam_xauth.so"
]};

pam_conf { sudo => [
    "auth       required	pam_stack.so service=system-auth",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth"
]};

pam_conf { "system-auth" => [
    "auth        required      /lib/security/$ISA/pam_env.so",
    "auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok",
    "auth        required      /lib/security/$ISA/pam_deny.so",
    "account     required      /lib/security/$ISA/pam_unix.so",
    "password    required      /lib/security/$ISA/pam_cracklib.so retry=3",
    "password    sufficient    /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow",
    "password    required      /lib/security/$ISA/pam_deny.so",
    "session     required      /lib/security/$ISA/pam_limits.so",
    "session     required      /lib/security/$ISA/pam_unix.so"
]};

pam_conf { up2date => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "up2date-config" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "up2date-nox" => [
    "auth       sufficient	pam_rootok.so",
    "auth       sufficient   pam_timestamp.so",
    "auth       required	pam_stack.so service=system-auth",
    "session	   required	pam_permit.so",
    "session    optional	pam_xauth.so",
    "session    optional     pam_timestamp.so",
    "account    required	pam_permit.so"
]};

pam_conf { "v4l-conf" => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so",
    "session    required	pam_permit.so",
    "session    optional	pam_xauth.so"
]};

pam_conf { xdm => [
    "auth       required	pam_stack.so service=system-auth",
    "auth       required	pam_nologin.so",
    "account    required	pam_stack.so service=system-auth",
    "password   required	pam_stack.so service=system-auth",
    "session    required	pam_stack.so service=system-auth",
    "session    optional	pam_console.so"
]};

pam_conf { xserver => [
    "auth       sufficient	pam_rootok.so",
    "auth       required	pam_console.so",
    "account    required	pam_permit.so"
]};


### Entries for /etc/services
ports [
	[ rtmp, "1/ddp" ],
	[ tcpmux, "1/udp" ],
	[ nbp, "2/ddp" ],
	[ echo, "4/ddp" ],
	[ rje, "5/tcp" ],
	[ rje, "5/udp" ],
	[ zip, "6/ddp" ],
	[ systat, "11/udp", users ],
	[ netstat, "15/tcp" ],
	[ qotd, "17/tcp", quote ],
	[ qotd, "17/udp", quote ],
	[ msp, "18/tcp" ],
	[ msp, "18/udp" ],
	[ "ftp-data", "20/udp" ],
	[ ftp, "21/udp", "fsp fspd" ],
	[ ssh, "22/udp" ],
	[ telnet, "23/udp" ],
	[ lmtp, "24/tcp" ],
	[ lmtp, "24/udp" ],
	[ smtp, "25/udp", mail ],
	[ rlp, "39/tcp", resource ],
	[ rlp, "39/udp", resource ],
	[ nameserver, "42/tcp", name ],
	[ nicname, "43/udp", whois ],
	[ tacacs, "49/tcp" ],
	[ tacacs, "49/udp" ],
	[ "re-mail-ck", "50/tcp" ],
	[ "re-mail-ck", "50/udp" ],
	[ "whois++", "63/tcp", "via-ftp" ],
	[ "whois++", "63/udp", "via-ftp" ],
	[ bootps, "67/tcp", dhcps ],
	[ bootpc, "68/tcp", dhcpc ],
	[ tftp, "69/tcp" ],
	[ gopher, "70/tcp" ],
	[ gopher, "70/udp" ],
	[ "netrjs-1", "71/tcp" ],
	[ "netrjs-1", "71/udp" ],
	[ "netrjs-2", "72/tcp" ],
	[ "netrjs-2", "72/udp" ],
	[ "netrjs-3", "73/tcp" ],
	[ "netrjs-3", "73/udp" ],
	[ "netrjs-4", "74/tcp" ],
	[ "netrjs-4", "74/udp" ],
	[ finger, "79/udp" ],
	[ http, "80/tcp", "www www-http" ],
	[ http, "80/udp", "www www-http" ],
	[ supdup, "95/udp" ],
	[ tacnews, "98/tcp", linuxconf ],
	[ hostname, "101/udp", hostnames ],
	[ "csnet-ns", "105/udp", "cso cso-ns" ],
	[ "3com-tsmux", "106/udp", poppassd ],
	[ pop3pw, "106/tcp", "3com-tsmux poppassd" ],
	[ rtelnet, "107/tcp" ],
	[ rtelnet, "107/udp" ],
	[ pop2, "109/udp", "pop-2 postoffice" ],
	[ pop3, "110/udp", "pop-3" ],
	[ auth, "113/tcp", "authentication ident tap" ],
	[ auth, "113/udp", "authentication ident tap" ],
	[ sftp, "115/tcp" ],
	[ sftp, "115/udp" ],
	[ "uucp-path", "117/udp" ],
	[ nntp, "119/udp", "readnews untp usenet" ],
	[ imap, "143/udp", "imap2 imap4" ],
	[ snmp, "161/tcp" ],
	[ snmp, "161/udp" ],
	[ snmptrap, "162/udp", "snmp-trap" ],
	[ "cmip-man", "163/tcp" ],
	[ "cmip-man", "163/udp" ],
	[ "cmip-agent", "164/tcp" ],
	[ "smip-agent", "164/udp", "cmip-agent" ],
	[ mailq, "174/tcp" ],
	[ mailq, "174/udp" ],
	[ xdmcp, "177/tcp" ],
	[ xdmcp, "177/udp" ],
	[ NextStep, "178/tcp", "NeXTStep nextstep" ],
	[ NextStep, "178/udp", "NeXTStep nextstep" ],
	[ bgp, "179/tcp" ],
	[ bgp, "179/udp" ],
	[ prospero, "191/tcp" ],
	[ prospero, "191/udp" ],
	[ irc, "194/tcp" ],
	[ irc, "194/udp" ],
	[ smux, "199/tcp" ],
	[ smux, "199/udp" ],
	[ "at-rtmp", "201/tcp" ],
	[ "at-rtmp", "201/udp" ],
	[ "at-nbp", "202/tcp" ],
	[ "at-nbp", "202/udp" ],
	[ "at-echo", "204/tcp" ],
	[ "at-echo", "204/udp" ],
	[ "at-zis", "206/tcp" ],
	[ "at-zis", "206/udp" ],
	[ qmtp, "209/tcp", tam ],
	[ qmtp, "209/udp", tam ],
	[ "z39.50", "210/tcp", "wais z3950" ],
	[ "z39.50", "210/udp", "wais z3950" ],
	[ ipx, "213/tcp" ],
	[ ipx, "213/udp" ],
	[ imap3, "220/tcp" ],
	[ imap3, "220/udp" ],
	[ link, "245/tcp", ttylink ],
	[ link, "245/udp", ttylink ],
	[ fatserv, "347/tcp" ],
	[ fatserv, "347/udp" ],
	[ rsvp_tunnel, "363/tcp" ],
	[ rsvp_tunnel, "363/udp" ],
	[ odmr, "366/tcp" ],
	[ odmr, "366/udp" ],
	[ rpc2portmap, "369/tcp" ],
	[ rpc2portmap, "369/udp" ],
	[ codaauth2, "370/tcp" ],
	[ codaauth2, "370/udp" ],
	[ ulistserv, "372/tcp", ulistproc ],
	[ ulistserv, "372/udp", ulistproc ],
	[ ldap, "389/tcp" ],
	[ ldap, "389/udp" ],
	[ svrloc, "427/tcp", slp ],
	[ svrloc, "427/udp", slp ],
	[ "mobileip-agent", "434/tcp" ],
	[ "mobileip-agent", "434/udp", "mobile-ip" ],
	[ "mobilip-mn", "435/tcp" ],
	[ "mobilip-mn", "435/udp" ],
	[ https, "443/tcp" ],
	[ https, "443/udp" ],
	[ snpp, "444/tcp" ],
	[ snpp, "444/udp" ],
	[ "microsoft-ds", "445/tcp" ],
	[ "microsoft-ds", "445/udp" ],
	[ kpasswd5, "464/tcp", "kpasswd kpwd" ],
	[ kpasswd5, "464/udp", "kpasswd kpwd" ],
	[ smtps, "465/tcp" ],
	[ photuris, "468/tcp" ],
	[ photuris, "468/udp" ],
	[ saft, "487/tcp" ],
	[ saft, "487/udp" ],
	[ "gss-http", "488/tcp" ],
	[ "gss-http", "488/udp" ],
	[ "pim-rp-disc", "496/tcp" ],
	[ "pim-rp-disc", "496/udp" ],
	[ isakmp, "500/tcp" ],
	[ isakmp, "500/udp", ike ],
	[ printer, "515/udp", spooler ],
	[ ntalk, "518/udp" ],
	[ utime, "519/tcp", unixtime ],
	[ utime, "519/udp", unixtime ],
	[ efs, "520/tcp" ],
	[ ripng, "521/tcp" ],
	[ ripng, "521/udp" ],
	[ timed, "525/tcp", timeserver ],
	[ timed, "525/udp", timeserver ],
	[ tempo, "526/tcp", newdate ],
	[ conference, "531/tcp", chat ],
	[ netnews, "532/tcp", readnews ],
	[ netwall, "533/udp" ],
	[ iiop, "535/tcp" ],
	[ iiop, "535/udp" ],
	[ gdomap, "538/tcp" ],
	[ gdomap, "538/udp" ],
	[ "dhcpv6-client", "546/tcp" ],
	[ "dhcpv6-client", "546/udp" ],
	[ "dhcpv6-server", "547/tcp" ],
	[ "dhcpv6-server", "547/udp" ],
	[ afpovertcp, "548/tcp" ],
	[ afpovertcp, "548/udp" ],
	[ rtsp, "554/tcp" ],
	[ rtsp, "554/udp" ],
	[ remotefs, "556/tcp", "rfs rfs_server" ],
	[ nntps, "563/tcp", snntp ],
	[ nntps, "563/udp", snntp ],
	[ whoami, "565/tcp" ],
	[ whoami, "565/udp" ],
	[ submission, "587/tcp", msa ],
	[ submission, "587/udp", msa ],
	[ "npmp-local", "610/tcp", dqs313_qmaster ],
	[ "npmp-local", "610/udp", dqs313_qmaster ],
	[ "npmp-gui", "611/tcp", dqs313_execd ],
	[ "npmp-gui", "611/udp", dqs313_execd ],
	[ "hmmp-ind", "612/tcp", dqs313_intercell ],
	[ "hmmp-ind", "612/udp", dqs313_intercell ],
	[ gii, "616/tcp" ],
	[ ipp, "631/tcp" ],
	[ ipp, "631/udp" ],
	[ ldaps, "636/tcp", sldap ],
	[ ldaps, "636/udp", sldap ],
	[ acap, "674/tcp" ],
	[ acap, "674/udp" ],
	[ "ha-cluster", "694/tcp" ],
	[ "ha-cluster", "694/udp" ],
	[ "kerberos-iv", "750/tcp", "kdc kerberos-sec kerberos4 rfile" ],
	[ pump, "751/tcp", kerberos_master ],
	[ pump, "751/udp", kerberos_master ],
	[ qrh, "752/udp", passwd_server ],
	[ ns, "760/tcp", "krbupdate kreg" ],
	[ webster, "765/tcp" ],
	[ webster, "765/udp" ],
	[ phonebook, "767/tcp", phone ],
	[ phonebook, "767/udp", phone ],
	[ omirr, "808/tcp", omirrd ],
	[ omirr, "808/udp", omirrd ],
	[ supfilesrv, "871/tcp" ],
	[ rsync, "873/tcp" ],
	[ rsync, "873/udp" ],
	[ swat, "901/tcp" ],
	[ rndc, "953/tcp" ],
	[ rndc, "953/udp" ],
	[ telnets, "992/tcp" ],
	[ telnets, "992/udp" ],
	[ imaps, "993/tcp" ],
	[ imaps, "993/udp" ],
	[ ircs, "994/tcp" ],
	[ ircs, "994/udp" ],
	[ pop3s, "995/tcp", spop3 ],
	[ pop3s, "995/udp", spop3 ],
	[ socks, "1080/tcp" ],
	[ socks, "1080/udp" ],
	[ kpop, "1109/tcp" ],
	[ supfiledbg, "1127/tcp" ],
	[ skkserv, "1178/tcp" ],
	[ bvcontrol, "1236/tcp", rmtcfg ],
	[ bvcontrol, "1236/udp" ],
	[ h323hostcallsc, "1300/tcp" ],
	[ h323hostcallsc, "1300/udp" ],
	[ xtel, "1313/tcp" ],
	[ "ms-sql-s", "1433/tcp" ],
	[ "ms-sql-s", "1433/udp" ],
	[ "ms-sql-m", "1434/tcp" ],
	[ "ms-sql-m", "1434/udp" ],
	[ ica, "1494/tcp" ],
	[ ica, "1494/udp" ],
	[ wins, "1512/tcp" ],
	[ wins, "1512/udp" ],
	[ ingreslock, "1524/udp" ],
	[ orasrv, "1525/tcp", "prospero-np" ],
	[ orasrv, "1525/udp", "prospero-np" ],
	[ coauthor, "1529/tcp", "gnatsd prmsd support" ],
	[ datametrics, "1645/tcp", "old-radius" ],
	[ datametrics, "1645/udp", "old-radius" ],
	[ "sa-msg-port", "1646/tcp", "old-radacct" ],
	[ "sa-msg-port", "1646/udp", "old-radacct" ],
	[ kermit, "1649/tcp" ],
	[ kermit, "1649/udp" ],
	[ l2tp, "1701/tcp", l2f ],
	[ l2tp, "1701/udp", l2f ],
	[ h323gatedisc, "1718/tcp" ],
	[ h323gatedisc, "1718/udp" ],
	[ h323gatestat, "1719/tcp" ],
	[ h323gatestat, "1719/udp" ],
	[ h323hostcall, "1720/tcp" ],
	[ h323hostcall, "1720/udp" ],
	[ "tftp-mcast", "1758/tcp" ],
	[ "tftp-mcast", "1758/udp" ],
	[ mtftp, "1759/udp" ],
	[ hello, "1789/tcp" ],
	[ hello, "1789/udp" ],
	[ radius, "1812/tcp" ],
	[ radius, "1812/udp" ],
	[ radacct, "1813/udp", "radius-acct" ],
	[ "radius-acct", "1813/tcp", radacct ],
	[ mtp, "1911/tcp" ],
	[ mtp, "1911/udp" ],
	[ hsrp, "1985/tcp" ],
	[ hsrp, "1985/udp" ],
	[ licensedaemon, "1986/tcp" ],
	[ licensedaemon, "1986/udp" ],
	[ "gdp-port", "1997/tcp" ],
	[ "gdp-port", "1997/udp" ],
	[ callbook, "2000/tcp", sieve ],
	[ callbook, "2000/udp", sieve ],
	[ cfingerd, "2003/tcp", cfinger ],
	[ knetd, "2053/tcp" ],
	[ "zephyr-srv", "2102/tcp" ],
	[ "zephyr-srv", "2102/udp" ],
	[ "zephyr-clt", "2103/tcp" ],
	[ "zephyr-clt", "2103/udp" ],
	[ "zephyr-hm", "2104/tcp" ],
	[ "zephyr-hm", "2104/udp" ],
	[ eklogin, "2105/tcp" ],
	[ ninstall, "2150/tcp" ],
	[ ninstall, "2150/udp" ],
	[ cvspserver, "2401/tcp" ],
	[ cvspserver, "2401/udp" ],
	[ venus, "2430/tcp" ],
	[ venus, "2430/udp" ],
	[ "venus-se", "2431/tcp" ],
	[ "venus-se", "2431/udp" ],
	[ codasrv, "2432/tcp" ],
	[ codasrv, "2432/udp" ],
	[ "codasrv-se", "2433/tcp" ],
	[ "codasrv-se", "2433/udp" ],
	[ hpstgmgr, "2600/udp" ],
	[ zebrasrv, "2600/tcp", hpstgmgr ],
	[ "discp-client", "2601/udp" ],
	[ zebra, "2601/tcp", "discp-client" ],
	[ "discp-server", "2602/udp" ],
	[ ripd, "2602/tcp", "discp-server" ],
	[ ripngd, "2603/tcp", servicemeter ],
	[ servicemeter, "2603/udp" ],
	[ "nsc-ccs", "2604/udp" ],
	[ ospfd, "2604/tcp", "nsc-ccs" ],
	[ bgpd, "2605/tcp", "nsc-posa" ],
	[ "nsc-posa", "2605/udp" ],
	[ netmon, "2606/udp" ],
	[ ospf6d, "2606/tcp", netmon ],
	[ dict, "2628/tcp" ],
	[ dict, "2628/udp" ],
	[ corbaloc, "2809/tcp" ],
	[ afbackup, "2988/tcp" ],
	[ afbackup, "2988/udp" ],
	[ squid, "3128/tcp" ],
	[ icpv2, "3130/tcp" ],
	[ icpv2, "3130/udp" ],
	[ mysql, "3306/tcp" ],
	[ mysql, "3306/udp" ],
	[ trnsprntproxy, "3346/tcp" ],
	[ trnsprntproxy, "3346/udp" ],
	[ prsvp, "3455/tcp" ],
	[ prsvp, "3455/udp", "rsvp-encap" ],
	[ distcc, "3632/tcp" ],
	[ svn, "3690/tcp" ],
	[ svn, "3690/udp" ],
	[ pxe, "4011/udp" ],
	[ fud, "4201/udp" ],
	[ rwhois, "4321/tcp" ],
	[ rwhois, "4321/udp" ],
	[ "nv-video", "4444/tcp", krb524 ],
	[ "nv-video", "4444/udp", krb524 ],
	[ fax, "4557/tcp" ],
	[ hylafax, "4559/tcp" ],
	[ rfe, "5002/tcp" ],
	[ rfe, "5002/udp" ],
	[ "sgi-dgl", "5232/tcp" ],
	[ "sgi-dgl", "5232/udp" ],
	[ cfengine, "5308/tcp" ],
	[ cfengine, "5308/udp" ],
	[ noclog, "5354/tcp" ],
	[ noclog, "5354/udp" ],
	[ hostmon, "5355/tcp" ],
	[ hostmon, "5355/udp" ],
	[ postgresql, "5432/tcp", postgres ],
	[ postgresql, "5432/udp", postgres ],
	[ canna, "5680/tcp" ],
	[ cvsup, "5999/tcp", CVSup ],
	[ cvsup, "5999/udp", CVSup ],
	[ x11, "6000/tcp", X ],
	[ "x11-ssh", "6010/tcp", "x11-ssh-offset" ],
	[ ircd, "6667/tcp" ],
	[ ircd, "6667/udp" ],
	[ "afs3-fileserver", "7000/tcp" ],
	[ "afs3-fileserver", "7000/udp" ],
	[ "afs3-callback", "7001/tcp" ],
	[ "afs3-callback", "7001/udp" ],
	[ "afs3-prserver", "7002/tcp" ],
	[ "afs3-prserver", "7002/udp" ],
	[ "afs3-vlserver", "7003/tcp" ],
	[ "afs3-vlserver", "7003/udp" ],
	[ "afs3-kaserver", "7004/tcp" ],
	[ "afs3-kaserver", "7004/udp" ],
	[ "afs3-volser", "7005/tcp" ],
	[ "afs3-volser", "7005/udp" ],
	[ "afs3-errors", "7006/tcp" ],
	[ "afs3-errors", "7006/udp" ],
	[ "afs3-bos", "7007/tcp" ],
	[ "afs3-bos", "7007/udp" ],
	[ "afs3-update", "7008/tcp" ],
	[ "afs3-update", "7008/udp" ],
	[ "afs3-rmtsys", "7009/tcp" ],
	[ "afs3-rmtsys", "7009/udp" ],
	[ "font-service", "7100/tcp", "fs xfs" ],
	[ tircproxy, "7666/tcp" ],
	[ "http-alt", "8008/tcp" ],
	[ "http-alt", "8008/udp" ],
	[ webcache, "8080/tcp" ],
	[ webcache, "8080/udp" ],
	[ tproxy, "8081/tcp" ],
	[ tproxy, "8081/udp" ],
	[ jetdirect, "9100/tcp", "hplj laserjet" ],
	[ mandelspawn, "9359/udp", mandelbrot ],
	[ sd, "9876/tcp" ],
	[ sd, "9876/udp" ],
	[ amanda, "10080/tcp" ],
	[ amanda, "10080/udp" ],
	[ kamanda, "10081/tcp" ],
	[ kamanda, "10081/udp" ],
	[ amandaidx, "10082/tcp" ],
	[ amidxtape, "10083/tcp" ],
	[ pgpkeyserver, "11371/tcp" ],
	[ pgpkeyserver, "11371/udp" ],
	[ h323callsigalt, "11720/tcp" ],
	[ h323callsigalt, "11720/udp" ],
	[ bprd, "13720/tcp" ],
	[ bprd, "13720/udp" ],
	[ bpdbm, "13721/tcp" ],
	[ bpdbm, "13721/udp" ],
	[ "bpjava-msvc", "13722/tcp" ],
	[ "bpjava-msvc", "13722/udp" ],
	[ vnetd, "13724/tcp" ],
	[ vnetd, "13724/udp" ],
	[ bpcd, "13782/tcp" ],
	[ bpcd, "13782/udp" ],
	[ vopied, "13783/tcp" ],
	[ vopied, "13783/udp" ],
	[ isdnlog, "20011/tcp" ],
	[ isdnlog, "20011/udp" ],
	[ vboxd, "20012/tcp" ],
	[ vboxd, "20012/udp" ],
	[ wnn4, "22273/tcp", wnn6 ],
	[ wnn6, "22273/udp", wnn4 ],
	[ wnn4_Cn, "22289/tcp", wnn6_Cn ],
	[ wnn4_Kr, "22305/tcp", wnn6_Kr ],
	[ wnn4_Tw, "22321/tcp", wnn6_Tw ],
	[ binkp, "24554/tcp" ],
	[ binkp, "24554/udp" ],
	[ quake, "26000/tcp" ],
	[ quake, "26000/udp" ],
	[ "wnn6-ds", "26208/udp" ],
	[ wnn6_DS, "26208/tcp", "wnn6-ds" ],
	[ asp, "27374/tcp" ],
	[ asp, "27374/udp" ],
	[ traceroute, "33434/tcp" ],
	[ traceroute, "33434/udp" ],
	[ tfido, "60177/tcp" ],
	[ tfido, "60177/udp" ],
	[ fido, "60179/tcp" ],
	[ fido, "60179/udp" ]
];