[14541] in Kerberos
RE: Ksu and Operation not permitted
daemon@ATHENA.MIT.EDU (Mayers, Philip J)
Wed Jun 6 05:11:11 2001
Message-ID: <A0F836836670D41183A800508BAF190B35E711@icex1.cc.ic.ac.uk>
From: "Mayers, Philip J" <p.mayers@ic.ac.uk>
To: "'Kevin Adams'" <kadams@pioneer-usa.com>, kerberos@mit.edu
Date: Wed, 6 Jun 2001 10:05:34 +0100
MIME-Version: 1.0
Content-Type: text/plain
chmod u+s /usr/kerberos/bin/ksu
i.e. ksu isn't setuid root, so of course doesn't work.
This is *INCREDIBLY* annoying - EVERY SINGLE ONE of RedHat's kerberos
updates puts the ksu back to 755 permissions, and you lose the ability to
ksu *every* time you update the kerberos RPM.
Regards,
Phil
+----------------------------------+
| Phil Mayers, Network Support |
| Centre for Computing Services |
| Imperial College |
+----------------------------------+
-----Original Message-----
From: Kevin Adams [mailto:kadams@pioneer-usa.com]
Sent: 05 June 2001 21:47
To: kerberos@MIT.EDU
Subject: Ksu and Operation not permitted
Hi, I have krb5 1.2.2-5 sort of working on a RH 7.0 system.
Everything works except ksu. Ksu works from root (of course) but not from a
normal id.
$ ksu root
ksu: Operation not permitted while selecting the best principal
$ ksu root -n principal
ksu: Operation not permitted while copying cache /tmp/krb5cc_212 to
FILE:/tmp/krb5cc_0.1
An ideas? Telnet, rsh, ftp and rcp all work, but not ksu.
Kevin Adams