[4985] in Kerberos
Re: kinit to another realm failing:, Can't send request
daemon@ATHENA.MIT.EDU (Booker C. Bense)
Mon Apr 17 10:10:55 1995
To: kerberos@MIT.EDU
Date: 17 Apr 1995 06:57:50 -0700
From: bbense@spelljammer.stanford.edu (Booker C. Bense)
In article <3msin7$giu@nova.voicenet.com>,
Bruce Momjian <root@candle.pha.pa.us> wrote:
>I am trying to use kinit to get a ticket (login) to a non-local realm.
>In fact, the realm is not part of the local domain, and is not contained
>in the kerberos krb.conf file.
>
[problem deleted ]
>
>Does the system administrator have to put every realm in the krb.conf
>file to make it reachable via kinit?
- No, you have to put them in krb.realms.......... %-( !!
> Is there a way for a user to
>over-ride the krb.conf file without having to bother the administrator?
>
- If you are using Cygnus kerberos software, it attempts to guess the kerberos
server from the domain name. ( A potentially unsecure misfeature IMHO ). You can
also override the system defaults using the environment variable KRB_CONF.
% setenv KRB_CONF ~/my_krb.conf
% kinit
- From my examination of the latest version of the source, I did not find any
equivalent for the realms file.
- Booker C. Bense : bbense@networking.stanford.edu
