[28432] in Kerberos
Re: Need help on GSSFTP
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Wed Sep 19 10:12:18 2007
Message-ID: <46F12DFE.1030402@anl.gov>
Date: Wed, 19 Sep 2007 09:11:10 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: tetsu.soh@nts.ricoh.co.jp
In-Reply-To: <OF1F6F946F.E87F8C4F-ON4925735A.0026A93D-4925735A.0028929E@nts.ricoh.co.jp>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
tetsu.soh@nts.ricoh.co.jp wrote:
> 530 GSSAPI user root/admin@TEST.COM is not authorized as tetsu; Access
> denied.
> Login failed.
>
>
As Markus pointed out you need a .k5login
But root does not normally have a Kerberos principal, as root
is more machine specific with each machine having root but root
on one is not related to root on another.
Most Kerberos commands will let you use different local username
and kerberos principals. like ssh with gssapi, ssh -l username host
will use your kerberos tickets with your principal th login
to host with the username. In this case the ~username/.k5login
should contain a line with your principal. Think of the .k5login
as the ACL for access to the account.
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
