[1485] in Kerberos
Re: How to use Kerberos from batch scripts
daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Thu Aug 1 02:35:30 1991
Date: 1 Aug 91 03:50:11 GMT
From: jik@cats.ucsc.edu (Jonathan I. Kamens)
To: kerberos@shelby.Stanford.EDU
The "ksrvtgt" command gives you a ticket-granting ticket as the name and
instance you specify. Typing "ksrvtgt rcmd butch" is equivalent to typing
"kinit rcmd.butch" and specifying the correct password, although you probably
wouldn't be able to do that because it was generated randomly when the srvtab
was generated and you don't know what it is (and, indeed, it may not be
composed of printable characters).
Therefore, if you want to use a TGT generated by ksrvtgt to do something on
another machine, the .klogin file for the user whose account you want to use
on the other machine must contain the principle you've extracted.
Apparently, in your example, the "at" job is running as user "seclark".
Therefore, ~seclark/.klogin on mrbill needs to have "rcmd.butch" in it in
order for your job to do the right thing. If you want the job on the other
machine to run as some other user, then you need to change "rsh mrbill" ro
"rsh mrbill -l user", and the .klogin file in "user"s home directory on mrbill
needs to have "rcmd.butch" in it.
I hope this clarifies things.
--
Jonathan Kamens jik@CATS.UCSC.EDU
