fix path to kadm5.keytab file; make substitution more portable; fix permissions/ownership of ksu program

kerberos/kerberos-setup.sh

@@ -39,5 +39,5 @@ echo "++ adding administrator \"admin@$realm\" to the Kerberos database"
 
 echo "++ adding kadmind keytab file to the Kerberos database"
 @l_prefix@/sbin/kadmin.local -q \
-    "ktadd -k @l_prefix@/var/kerberos/kadm5.keytab kadmin/admin kadmin/changepw"
+    "ktadd -k @l_prefix@/var/kerberos/db/kadm5.keytab kadmin/admin kadmin/changepw"
 

kerberos/kerberos.spec

@@ -87,7 +87,7 @@ AutoReqProv:  no
         -e 's;/etc/krb5\.conf:@SYSCONFDIR/krb5.conf;@SYSCONFDIR/kerberos/krb5.conf;g' \
         -e 's;FILE:/etc/krb5\.keytab;FILE:@SYSCONFDIR/kerberos/krb5.keytab;g' \
         -e 's;@LOCALSTATEDIR/krb5kdc;@LOCALSTATEDIR/kerberos;g' \
-        -e 's;DEFAULT_KDC_PROFILE\t"@LOCALSTATEDIR;DEFAULT_KDC_PROFILE "@SYSCONFDIR;g' \
+        -e 's;DEFAULT_KDC_PROFILE."@LOCALSTATEDIR;DEFAULT_KDC_PROFILE "@SYSCONFDIR;g' \
         src/include/krb5/stock/osconf.h
 
 %build
@@ -164,7 +164,8 @@ AutoReqProv:  no
         '%not %dir %{l_prefix}/etc/fsl' \
         '%config %{l_prefix}/etc/fsl/fsl.kerberos' \
         '%config %{l_prefix}/etc/kerberos/*.conf' \
-        '%doc %{l_prefix}/share/kerberos/*.ps'
+        '%doc %{l_prefix}/share/kerberos/*.ps' \
+        '%attr(4755,%{l_susr},%{l_mgrp}) %{l_prefix}/bin/ksu'
 
 %files -f files