[23182] in Kerberos
Re: MIT Kerberos and Solaris 10 Kerberos - never mind last question
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Jan 11 18:17:54 2005
Message-ID: <41E45DE7.4010703@anl.gov>
Date: Tue, 11 Jan 2005 17:14:47 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: "Heilke, Rainer" <Rainer.Heilke@atcoitek.com>
In-Reply-To: <A28A519A6A08AD4A9553A9DB5265FD3E01CE241F@is030.atco.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Heilke, Rainer wrote:
>>possibly 'su' with pam_krb5 for the authentication. Its not quite
>>the same as 'ksu', though.
>
>
> Douglas says the same. The su man page indicates something about this,
> but not a lot of details there. I'll look into this further. As far as a
> co-worker is concerned (and in our environment, I can see his point),
> this would be a show stopper. We use ksu for all sorts of things,
> including giving DBA's access to Oracle ID's.
>
> Thanks again for all of the help. I'll go through the su and pam.conf
> man pages, and see if I can figure it out.
Make sure you have a root window open before testing PAM. I stumbled on
this when I tried to su and my test pam exit failed!
>
> Rainer
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos