OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	06/10/2025 09:51:14 PM	rwxr-xr-x
📄 access.aug	3.58 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 activemq_conf.aug	1.47 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 activemq_xml.aug	864 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 afs_cellalias.aug	1.56 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 aliases.aug	2.18 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 anaconda.aug	775 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 anacron.aug	2.49 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 approx.aug	1.26 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 apt_update_manager.aug	1.11 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 aptcacherngsecurity.aug	726 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 aptconf.aug	3.9 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 aptpreferences.aug	1.79 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 aptsources.aug	1.98 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 authinfo2.aug	1.44 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 authorized_keys.aug	1.84 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 authselectpam.aug	3.7 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 automaster.aug	3.31 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 automounter.aug	4.05 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 avahi.aug	1.38 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 backuppchosts.aug	1014 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 bbhosts.aug	4.24 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 bootconf.aug	3.65 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 build.aug	16.65 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cachefilesd.aug	2 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 carbon.aug	1.54 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ceph.aug	719 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cgconfig.aug	3.37 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cgrules.aug	2.38 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 channels.aug	3.84 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 chrony.aug	13.79 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 clamav.aug	1.72 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cmdline.aug	506 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cobblermodules.aug	398 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cobblersettings.aug	2.24 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cockpit.aug	1.96 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 collectd.aug	869 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cpanel.aug	824 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cron.aug	4.05 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cron_user.aug	1.26 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 crypttab.aug	3.08 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 csv.aug	1.18 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 cups.aug	459 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 cyrus_imapd.aug	1.51 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 darkice.aug	773 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 debctrl.aug	3.61 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 desktop.aug	1.39 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 devfsrules.aug	619 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 device_map.aug	620 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 dhclient.aug	6.69 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dhcpd.aug	20.88 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dns_zone.aug	2.89 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dnsmasq.aug	2.16 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dovecot.aug	3.98 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dpkg.aug	2.78 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 dput.aug	2.16 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 erlang.aug	4.33 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ethers.aug	663 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 exports.aug	2.37 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 fai_diskconfig.aug	9.28 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 fail2ban.aug	1.79 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 fonts.aug	819 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 fstab.aug	1.23 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 fuse.aug	871 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 gdm.aug	1.8 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 getcap.aug	1.57 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 group.aug	1.66 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 grub.aug	11.05 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 grubenv.aug	508 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 gshadow.aug	2.19 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 gtkbookmarks.aug	855 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 host_conf.aug	1.9 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 hostname.aug	435 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 hosts.aug	485 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 hosts_access.aug	4.32 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 htpasswd.aug	1.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 httpd.aug	7.35 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 inetd.aug	6.22 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 inifile.aug	15.49 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 inittab.aug	780 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 inputrc.aug	1.62 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 interfaces.aug	4.62 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 iproute2.aug	323 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 iptables.aug	2.64 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 iscsid.aug	684 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 jaas.aug	1.57 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 jettyrealm.aug	1.52 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 jmxaccess.aug	1.35 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 jmxpassword.aug	1.34 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 json.aug	2.15 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 kdump.aug	3.06 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 keepalived.aug	10.73 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 known_hosts.aug	1.93 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 koji.aug	898 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 krb5.aug	6.98 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ldif.aug	7.65 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ldso.aug	1.06 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 lightdm.aug	1.75 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 limits.aug	2.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 login_defs.aug	615 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 logrotate.aug	4.23 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 logwatch.aug	1.44 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 lokkit.aug	2.16 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 lvm.aug	2.03 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mailscanner.aug	1.66 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mailscanner_rules.aug	2.84 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 masterpasswd.aug	4.36 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mcollective.aug	1.09 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mdadm_conf.aug	10.05 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 memcached.aug	1.24 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mke2fs.aug	6.29 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 modprobe.aug	3.34 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 modules.aug	741 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 modules_conf.aug	1.04 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mongodbserver.aug	1.17 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 monit.aug	2.13 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 multipath.aug	4.21 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 mysql.aug	1.95 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nagioscfg.aug	2.09 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nagiosobjects.aug	1.57 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 netmasks.aug	1.69 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 networkmanager.aug	2.18 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 networks.aug	1.09 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nginx.aug	3.65 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nrpe.aug	1.78 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nslcd.aug	9.87 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 nsswitch.aug	2.33 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ntp.aug	5.29 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ntpd.aug	4.75 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 odbc.aug	1.42 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 opendkim.aug	3.1 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 openshift_config.aug	2.46 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 openshift_http.aug	1.03 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 openshift_quickstarts.aug	1.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 openvpn.aug	22.28 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 oz.aug	1.35 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pagekite.aug	2.6 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pam.aug	2.58 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pamconf.aug	1.23 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 passwd.aug	3.52 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pbuilder.aug	638 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 pg_hba.aug	2.97 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pgbouncer.aug	1.43 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 php.aug	2.34 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 phpvars.aug	3.85 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_access.aug	771 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_main.aug	1.52 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_master.aug	1.9 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_passwordmap.aug	1.28 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_sasl_smtpd.aug	697 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_transport.aug	1.48 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postfix_virtual.aug	1.32 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 postgresql.aug	2.1 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 properties.aug	2.3 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 protocols.aug	1.05 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 puppet.aug	1.52 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 puppet_auth.aug	1.95 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 puppetfile.aug	2.27 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 puppetfileserver.aug	3.12 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pylonspaste.aug	2.3 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 pythonpaste.aug	1.99 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 qpid.aug	670 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 quote.aug	6.71 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rabbitmq.aug	4.69 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 radicale.aug	1.48 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rancid.aug	927 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 redis.aug	6.5 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 reprepro_uploaders.aug	5.47 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 resolv.aug	4.03 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rhsm.aug	1.1 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rmt.aug	788 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 rsyncd.aug	1.97 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rsyslog.aug	3.27 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 rtadvd.aug	854 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 rx.aug	4.2 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 samba.aug	1.71 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 schroot.aug	1.79 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 securetty.aug	450 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 semanage.aug	1.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sep.aug	1.28 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 services.aug	2.82 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 shadow.aug	2.35 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 shells.aug	745 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 shellvars.aug	12.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 shellvars_list.aug	1.74 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 simplelines.aug	1.13 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 simplevars.aug	1.4 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sip_conf.aug	1.61 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 slapd.aug	5.2 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 smbusers.aug	781 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 solaris_system.aug	3.15 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 soma.aug	1.14 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sos.aug	807 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 spacevars.aug	1.42 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 splunk.aug	1.64 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 squid.aug	15.95 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 ssh.aug	4.39 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sshd.aug	4.74 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sssd.aug	861 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 star.aug	941 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 strongswan.aug	1.63 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 stunnel.aug	2.21 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 subversion.aug	2.75 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sudoers.aug	20.08 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sysconfig.aug	2.49 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sysconfig_route.aug	2.55 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 sysctl.aug	1.36 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 syslog.aug	7.33 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 systemd.aug	6 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 termcap.aug	1.03 KB	03/31/2024 05:41:49 PM	rw-r--r--
📁 tests	-	06/10/2025 09:51:14 PM	rwxr-xr-x
📄 thttpd.aug	1.31 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 tinc.aug	1.08 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 tmpfiles.aug	3.16 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 toml.aug	4.24 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 trapperkeeper.aug	4.01 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 tuned.aug	387 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 up2date.aug	2.21 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 updatedb.aug	1.13 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 util.aug	4.85 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 vfstab.aug	1.71 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 vmware_config.aug	702 bytes	03/31/2024 05:41:49 PM	rw-r--r--
📄 vsftpd.aug	2.72 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 webmin.aug	1.23 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 wine.aug	1.92 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xendconfsxp.aug	1.07 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xinetd.aug	4.02 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xml.aug	6.33 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xorg.aug	10.43 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xymon.aug	2.26 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 xymon_alerting.aug	6.11 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 yaml.aug	1.54 KB	03/31/2024 05:41:49 PM	rw-r--r--
📄 yum.aug	2.19 KB	03/31/2024 05:41:49 PM	rw-r--r--

Editing: krb5.aug

module Krb5 =

autoload xfm

let comment = Inifile.comment IniFile.comment_re "#"
let empty = Inifile.empty
let eol = Inifile.eol
let dels = Util.del_str

let indent = del /[ \t]*/ ""
let comma_or_space_sep = del /[ \t,]{1,}/ " "
let eq = del /[ \t]*=[ \t]*/ " = "
let eq_openbr = del /[ \t]*=[ \t\n]*\{[ \t]*\n/ " = {\n"
let closebr = del /[ \t]*\}/ "}"

(* These two regexps for realms and apps are not entirely true
   - strictly speaking, there's no requirement that a realm is all upper case
   and an application only uses lowercase. But it's what's used in practice.

Without that distinction we couldn't distinguish between applications
   and realms in the [appdefaults] section.
*)

let include_re = /include(dir)?/
let realm_re = /[A-Z0-9][.a-zA-Z0-9-]*/
let realm_anycase_re = /[A-Za-z0-9][.a-zA-Z0-9-]*/
let app_re = /[a-z][a-zA-Z0-9_]*/
let name_re = /[.a-zA-Z0-9_-]+/ - include_re

let value_br = store /[^;# \t\r\n{}]+/
let value = store /[^;# \t\r\n]+/
let entry (kw:regexp) (sep:lens) (value:lens) (comment:lens)
    = [ indent . key kw . sep . value . (comment|eol) ] | comment

let subsec_entry (kw:regexp) (sep:lens) (comment:lens)
    = ( entry kw sep value_br comment ) | empty

let simple_section (n:string) (k:regexp) =
  let title = Inifile.indented_title n in
  let entry = entry k eq value comment in
    Inifile.record title entry

let record (t:string) (e:lens) =
  let title = Inifile.indented_title t in
    Inifile.record title e

let v4_name_convert (subsec:lens) = [ indent . key "v4_name_convert" .
                        eq_openbr .  subsec* . closebr . eol ]

(*
  For the enctypes this appears to be a list of the valid entries:
       c4-hmac arcfour-hmac aes128-cts rc4-hmac
       arcfour-hmac-md5 des3-cbc-sha1 des-cbc-md5 des-cbc-crc
*)
let enctype_re = /[a-zA-Z0-9-]{3,}/
let enctypes = /permitted_enctypes|default_tgs_enctypes|default_tkt_enctypes/i

(* An #eol label prevents ambiguity between "k = v1 v2" and "k = v1\n k = v2" *)
let enctype_list (nr:regexp) (ns:string) =
  indent . del nr ns . eq
    . Build.opt_list [ label ns . store enctype_re ] comma_or_space_sep
    . (comment|eol) . [ label "#eol" ]

let libdefaults =
  let option = entry (name_re - ("v4_name_convert" |enctypes)) eq value comment in
  let enctype_lists = enctype_list /permitted_enctypes/i "permitted_enctypes"
                      | enctype_list /default_tgs_enctypes/i "default_tgs_enctypes"
                      | enctype_list /default_tkt_enctypes/i "default_tkt_enctypes" in
  let subsec = [ indent . key /host|plain/ . eq_openbr .
                   (subsec_entry name_re eq comment)* . closebr . eol ] in
  record "libdefaults" (option|enctype_lists|v4_name_convert subsec)

let login =
  let keys = /krb[45]_get_tickets|krb4_convert|krb_run_aklog/
    |/aklog_path|accept_passwd/ in
    simple_section "login" keys

let appdefaults =
  let option = entry (name_re - ("realm" | "application")) eq value_br comment in
  let realm = [ indent . label "realm" . store realm_re .
                  eq_openbr . (option|empty)* . closebr . eol ] in
  let app = [ indent . label "application" . store app_re .
                eq_openbr . (realm|option|empty)* . closebr . eol] in
    record "appdefaults" (option|realm|app)

let realms =
  let simple_option = /kdc|admin_server|database_module|default_domain/
      |/v4_realm|auth_to_local(_names)?|master_kdc|kpasswd_server/
      |/admin_server|ticket_lifetime|pkinit_(anchors|identities|identity|pool)/
      |/krb524_server/ in
  let subsec_option = /v4_instance_convert/ in
  let option = subsec_entry simple_option eq comment in
  let subsec = [ indent . key subsec_option . eq_openbr .
                   (subsec_entry name_re eq comment)* . closebr . eol ] in
  let v4subsec = [ indent . key /host|plain/ . eq_openbr .
                   (subsec_entry name_re eq comment)* . closebr . eol ] in
  let realm = [ indent . label "realm" . store realm_anycase_re .
                  eq_openbr . (option|subsec|(v4_name_convert v4subsec))* .
                  closebr . eol ] in
    record "realms" (realm|comment)

let domain_realm =
  simple_section "domain_realm" name_re

let logging =
  let keys = /kdc|admin_server|default/ in
  let xchg (m:regexp) (d:string) (l:string) =
    del m d . label l in
  let xchgs (m:string) (l:string) = xchg m m l in
  let dest =
    [ xchg /FILE[=:]/ "FILE=" "file" . value ]
    |[ xchgs "STDERR" "stderr" ]
    |[ xchgs "CONSOLE" "console" ]
    |[ xchgs "DEVICE=" "device" . value ]
    |[ xchgs "SYSLOG" "syslog" .
         ([ xchgs ":" "severity" . store /[A-Za-z0-9]+/ ].
          [ xchgs ":" "facility" . store /[A-Za-z0-9]+/ ]?)? ] in
  let entry = [ indent . key keys . eq . dest . (comment|eol) ] | comment in
    record "logging" entry

let capaths =
  let realm = [ indent . key realm_re .
                  eq_openbr .
                  (entry realm_re eq value_br comment)* . closebr . eol ] in
    record "capaths" (realm|comment)

(* This section is not documented in the krb5.conf manpage,
   but the Fermi example uses it. *)
let instance_mapping =
  let value = dels "\"" . store /[^;# \t\r\n{}]*/ . dels "\"" in
  let map_node = label "mapping" . store /[a-zA-Z0-9\/*]+/ in
  let mapping = [ indent . map_node . eq .
                    [ label "value" . value ] . (comment|eol) ] in
  let instance = [ indent . key name_re .
                     eq_openbr . (mapping|comment)* . closebr . eol ] in
    record "instancemapping" instance

let kdc =
  simple_section "kdc" /profile/

let pam =
  simple_section "pam" name_re

let plugins =
  let interface_option = subsec_entry name_re eq comment in
  let interface = [ indent . key name_re .
                  eq_openbr . (interface_option)* . closebr . eol ] in
    record "plugins" (interface|comment)

let includes = Build.key_value_line include_re Sep.space (store Rx.fspath)
let include_lines = includes . (comment|empty)*

let filter = (incl "/etc/krb5.conf.d/*.conf")
           . (incl "/etc/krb5.conf")

let xfm = transform lns filter