[29387] in Kerberos

home help back first fref pref prev next nref lref last post

Re: k5login & root

daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Thu Feb 28 21:45:16 2008

From: "Richard E. Silverman" <res@qoxp.net>
Date: Thu, 28 Feb 2008 21:33:18 -0500
Message-ID: <m2mypkv6dt.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@speakeasy.net
X-DMCA-Complaints-To: abuse@speakeasy.net
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>>>>> "SM" == Steven Miller <stevenraymillerjr@yahoo.com> writes:

    SM> It looks as if root needs to be a principal in the realm, before
    SM> using a k5login file to allow users to become root. Is this
    SM> correct?

No -- root is a Unix account to which you are giving certain principals
access, but placing those principals' names in ~root/.5login.  There's no
need for a principal corresponding to the root account.

    SM> Assuming that it is, I want root's password to be managed
    SM> locally (i.e not via kerberos), is there a way to do this? I would
    SM> guess it might involve a keytab?

    SM> thanks in advance,

    SM> Steven


    SM>       ____________________________________________________________________________________
    SM> Be a better friend, newshound, and know-it-all with Yahoo! Mobile.
    SM> Try it now.
    SM> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ


-- 
  Richard Silverman
  res@qoxp.net

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post