[38503] in Kerberos
Re: Installing heimdal-kdc
daemon@ATHENA.MIT.EDU (Lothar Schilling)
Tue Mar 12 09:49:27 2019
To: "kerberos@mit.edu" <kerberos@mit.edu>
From: Lothar Schilling <ls@proasyl.de>
Message-ID: <546723ea-c99a-8960-2f4a-8e7af9766be4@proasyl.de>
Date: Tue, 12 Mar 2019 14:48:54 +0100
MIME-Version: 1.0
In-Reply-To: <9ff088dc-d770-40c8-b3eb-d9e54e99771a@cmu.edu>
Content-Language: de-DE
Content-Type: text/plain; charset="windows-1252"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Am 11.03.2019 um 20:14 schrieb Jeffrey Hutzelman:
>
> add, add_new_key, and ank are synonyms. The last dates back to krb4
>
>
> ------------------------------------------------------------------------
> *From:* Robbie Harwood <rharwood@redhat.com>
> *Sent:* Monday, March 11, 2019 13:49
> *To:* Lothar Schilling; kerberos@mit.edu
> *Subject:* Re: Installing heimdal-kdc
>
> Lothar Schilling <ls@proasyl.de> writes:
>
> > I got stuck again with putting heimdal-kdc to work.
> >
> > Having initiated the database I logged in locally (kadmin -l). There is
> > no such command as "add_principals" or "addprinc". Availabe are:
> > stash, kstash / dump / init / load / merge / add, ank, add_new_key /
> > passwd, cpw, change_password / delete, del, del_entry / del_enctype /
> > add_enctype / ext_keytab / get, get_entry / rename / modify /
> > privileges, privs / list / verify-password-quality, pwq / check / lock/
> > unlock / help, ? / exit, quit /
>
> add_principals and addprinc are commands for MIT krb5's kadmin, not
> Heimdal. Heimdal uses different commands; I think "ank" is the right
> one here, but it's been a while so I'll defer to those folk if they're
> around.
>
> Thanks,
> --Robbie
Finally solved the problem (which certainly was a newbie one...): In
MIT-kadmind.acl the placeholder for global permissions is *.
Heimdal-kadmind.acl uses "all".
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
