[2297] in Kerberos
Another Gotcha
daemon@ATHENA.MIT.EDU (Joe Ramus)
Wed Oct 21 19:11:34 1992
Date: Wed, 21 Oct 92 15:16:44 PDT
From: ramus@nersc.gov (Joe Ramus)
To: kerberos@Athena.MIT.EDU
I discovered a new way to have a problem with Kerberos Version 4.
On many of our Sun systems, the home directory is actually an NFS
mount from a file server. The Kerberos remote login and remote shell
procedures check a file ".klogin" in the users home directory in order to
decide if a remote operation is authorized. The Kerberos remote login server
or remote shell server on a remote host runs as ROOT and ROOT does not have
any special access rights on an NFS mounted file system.
Some users allow owner access only on their home directory.
Hence, a ROOT process cannot read ".klogin" and this causes an
error that is somewhat obscure.
The regular Unix rlogin or rsh does not have the same problem with
the ".rhosts" file in a home directory.
I suspect that the remote server process changes to my UID before trying
to read the file ".rhosts". So this is really a Kerberos BUG.
Joe Ramus NERSC Livermore (510) 423-8917 ramus@nersc.gov
