[4992] in Kerberos
Re: kinit to another realm failing:, Can't send request
daemon@ATHENA.MIT.EDU (Bruce Momjian)
Tue Apr 18 15:48:27 1995
To: kerberos@MIT.EDU
Date: 18 Apr 1995 18:14:04 GMT
From: root@candle.pha.pa.us (Bruce Momjian)
Booker C. Bense (bbense@spelljammer.stanford.edu) wrote:
: In article <3msin7$giu@nova.voicenet.com>,
: Bruce Momjian <root@candle.pha.pa.us> wrote:
: >I am trying to use kinit to get a ticket (login) to a non-local realm.
: >In fact, the realm is not part of the local domain, and is not contained
: >in the kerberos krb.conf file.
: >
: >Does the system administrator have to put every realm in the krb.conf
: >file to make it reachable via kinit?
: > Is there a way for a user to
: >over-ride the krb.conf file without having to bother the administrator?
: >
From the responses I have gotten to my query, I conclude that there is
no way to do this on a standard KerberosIV system. Cygnus seems to have
added some nice enhancements.
IMHO, I agree that there is no harm in doing a lookup on the default
domain if it is not in the krb.conf file.
The stock KerberosIV does not have a KRB_CONF variable.
The reason I asked is that I have an account on an Internet provider's
machine, and sometimes I use it to log in to other sites that support
Kerberos.
It would make sense to use Kerberos rather than sending the password
across the Internet during telnet logins.
I really can't ask the provider to create a system-wide krb.conf file
for me.
--
Bruce Momjian | 830 Blythe Avenue
root@candle.pha.pa.us | Drexel Hill, Pennsylvania 19026
+ If your life is a hard drive, | (610) 353-9879(w)
+ Christ can be your backup. | (610) 853-3000(h)
