[23182] in Kerberos

home help back first fref pref prev next nref lref last post

Re: MIT Kerberos and Solaris 10 Kerberos - never mind last question

daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Jan 11 18:17:54 2005

Message-ID: <41E45DE7.4010703@anl.gov>
Date: Tue, 11 Jan 2005 17:14:47 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: "Heilke, Rainer" <Rainer.Heilke@atcoitek.com>
In-Reply-To: <A28A519A6A08AD4A9553A9DB5265FD3E01CE241F@is030.atco.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu



Heilke, Rainer wrote:

>>possibly 'su' with pam_krb5 for the authentication.  Its not quite
>>the same as 'ksu', though.
> 
> 
> Douglas says the same. The su man page indicates something about this,
> but not a lot of details there. I'll look into this further. As far as a
> co-worker is concerned (and in our environment, I can see his point),
> this would be a show stopper. We use ksu for all sorts of things,
> including giving DBA's access to Oracle ID's.
> 
> Thanks again for all of the help. I'll go through the su and pam.conf
> man pages, and see if I can figure it out.

Make sure you have a root window open before testing PAM. I stumbled on
this when I tried to su and my test pam exit failed!


> 
> Rainer
> 
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 
> 

-- 

  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post