[14541] in Kerberos

home help back first fref pref prev next nref lref last post

RE: Ksu and Operation not permitted

daemon@ATHENA.MIT.EDU (Mayers, Philip J)
Wed Jun 6 05:11:11 2001

Message-ID: <A0F836836670D41183A800508BAF190B35E711@icex1.cc.ic.ac.uk>
From: "Mayers, Philip J" <p.mayers@ic.ac.uk>
To: "'Kevin Adams'" <kadams@pioneer-usa.com>, kerberos@mit.edu
Date: Wed, 6 Jun 2001 10:05:34 +0100 
MIME-Version: 1.0
Content-Type: text/plain

chmod u+s /usr/kerberos/bin/ksu

i.e. ksu isn't setuid root, so of course doesn't work.

This is *INCREDIBLY* annoying - EVERY SINGLE ONE of RedHat's kerberos
updates puts the ksu back to 755 permissions, and you lose the ability to
ksu *every* time you update the kerberos RPM.

Regards,
Phil

+----------------------------------+
| Phil Mayers, Network Support     |
| Centre for Computing Services    |
| Imperial College                 |
+----------------------------------+  

-----Original Message-----
From: Kevin Adams [mailto:kadams@pioneer-usa.com]
Sent: 05 June 2001 21:47
To: kerberos@MIT.EDU
Subject: Ksu and Operation not permitted


Hi, I have krb5 1.2.2-5 sort of working on a RH 7.0 system.

Everything works except ksu. Ksu works from root (of course) but not from a
normal id.

$ ksu root
ksu: Operation not permitted while selecting the best principal

$ ksu root -n principal
ksu: Operation not permitted while copying cache /tmp/krb5cc_212 to
FILE:/tmp/krb5cc_0.1

An ideas? Telnet, rsh, ftp and rcp all work, but not ksu.

Kevin Adams



home help back first fref pref prev next nref lref last post