[28092] in Kerberos

home help back first fref pref prev next nref lref last post

Re: AIX, su & pam

daemon@ATHENA.MIT.EDU (Markus Moeller)
Mon Jul 23 14:29:09 2007

To: kerberos@mit.edu
From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Mon, 23 Jul 2007 19:28:17 +0100
Message-ID: <f82s0u$j6v$1@sea.gmane.org>
X-Complaints-To: usenet@sea.gmane.org
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

There seem to be some confusion here. .k5login has nothing to do with which 
TGT is requested.  And the normal AIX su (as far as I know) does not use 
Kerberos so you can not provide another principal to login as (also not if 
pam_krb5 is used).

Markus

<Andreas.Jonsson@ica.se> wrote in message 
news:OF97FF124E.667709DF-ONC125731D.003B3503-C125731D.003BBE91@ica.se...
> Hello
> I've been trying to configure an aix client to acknowledge instances when
> using the su command. We have personalized root instances, so i would like
> to authenticate with my andreas/root@REALM-principal. This works fine when
> using mit ksu with the -n flag, but when i use the su command bundled with
> AIX it tries to request a root@REALM TGT.
>
> Is it possible to configure su in AIX to respect ~/.k5login, or is there
> some other procedure in AIX that will give the same result?
>
> regards
> andreas
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post