[24715] in Kerberos
Re: Kerberized Login Window on OS X 10.4
daemon@ATHENA.MIT.EDU (Alexandra Ellwood)
Sat Sep 24 10:51:58 2005
In-Reply-To: <2f3ecb8305092315245da22d25@mail.google.com>
Mime-Version: 1.0 (Apple Message framework v734)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <7FDC6ED2-937D-420B-AF75-A843379D0CC6@mit.edu>
Content-Transfer-Encoding: 7bit
From: Alexandra Ellwood <lxs@mit.edu>
Date: Sat, 24 Sep 2005 10:50:57 -0400
To: Shane Liebling <shanel@google.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
On Sep 23, 2005, at 6:24 PM, Shane Liebling wrote:
> Has there been any news on how to get this working yet? Or is
> everyone who needs it working still being advised to not upgrade to
> 10.4?
If you have updgraded to 10.4.2 or later you can now use the
Kerberized login window support. However, Apple changed behavior of
the /etc/authorization file. I believe you now want to replace
<string>authinternal</string>
with
<string>builtin:krb5authenticate,privileged</string>
or
<string>builtin:krb5authnoverify,privileged</string>
because the SecurityAgent no longer automatically runs mechanisms as
root.
Hope this helps,
--lxs
Alexandra Ellwood <lxs@mit.edu>
MIT Kerberos Development Team
<http://mit.edu/lxs/www>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
