[38409] in Kerberos
Re: Running KDC as non-root and dockerize KDC
daemon@ATHENA.MIT.EDU (Jim Shi)
Fri Jan 4 12:50:56 2019
MIME-version: 1.0
From: Jim Shi <hanmao_shi@apple.com>
Message-id: <9D73DE57-B7B5-4EC4-89F1-291445F40827@apple.com>
Date: Fri, 04 Jan 2019 09:50:08 -0800
In-reply-to: <CAJYMFR49qbBP9coHm6DQLJMM38xoZFX7Dvm0uGHLK+fLZRyjUg@mail.gmail.com>
To: Yegui Cai <caiyegui@gmail.com>
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============5520832540417340708=="
Errors-To: kerberos-bounces@mit.edu
--===============5520832540417340708==
Content-type: multipart/signed;
boundary="Apple-Mail=_4E76C04B-B77A-4915-B79C-87423BD76566";
protocol="application/pkcs7-signature"; micalg=sha-256
--Apple-Mail=_4E76C04B-B77A-4915-B79C-87423BD76566
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii
> On Jan 4, 2019, at 6:55 AM, Yegui Cai <caiyegui@gmail.com> wrote:
>
> Hi all.
>
> This can be two threads but I have the following two questions at the same
> time.
> 1. Can we run KDC as a non-root user? Meaning is it required to run KDC as
> root?
yes root user is not required.
> 2. Is there any official docker images for KDC? or any plan to have one?
>
> Thanks!
> Yegui
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
--Apple-Mail=_4E76C04B-B77A-4915-B79C-87423BD76566
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail=_4E76C04B-B77A-4915-B79C-87423BD76566--
--===============5520832540417340708==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============5520832540417340708==--
