[29353] in Kerberos

home help back first fref pref prev next nref lref last post

auth_to_local_names

daemon@ATHENA.MIT.EDU (grackle)
Fri Feb 22 17:30:16 2008

From: grackle <davidhuebel@gmail.com>
Date: Fri, 22 Feb 2008 14:23:53 -0800 (PST)
Message-ID: <ff5aa1a7-e0d9-466f-b37c-6602c2e99a23@n75g2000hsh.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

I want Kerberos principal user1 to be able to log into user account
user2 on a particular host.  I specified

auth_to_local_names {
   user1 = user2
}

in the krb5.conf file on the host.  When I kinit on another machine as
user1 and ssh to the host, I get a password prompt.  When I enter my
password, I am logged in as user1.  If I change the above lines to

auth_to_local_names {
   xxxxx = user2
}

then the host logs me in as user1 without asking for a password.

What am I missing?  Also, I did my best to turn on logging (see my
logging section below), but nothing gets logged when I try to
connect.  I'm completely new to this; what approach could I take to
debugging this myself?

Thanks,
-David

[logging]
   default = SYSLOG:DEBUG:AUTH
   default = SYSLOG:DEBUG:ERR
   default = SYSLOG:DEBUG:DAEMON
   default = SYSLOG:DEBUG:USER
   default = SYSLOG:DEBUG:KERN


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post