[7892] in Kerberos
Re: kpropd rejects connection
daemon@ATHENA.MIT.EDU (Sam Hartman)
Sun Sep 1 19:56:39 1996
To: Mark Eichin <eichin@cygnus.com>
Cc: kerberos@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 01 Sep 1996 19:48:18 -0400
In-Reply-To: Mark Eichin's message of 01 Sep 1996 18:18:32 -0400
>>>>> "Mark" == Mark Eichin <eichin@cygnus.com> writes:
Mark> krb5 uses a real acl file to determine what machines can
Mark> send kprops, instead of overloading the hostname (as MIT V4
Mark> did) or the admin server line in krb.conf (as CNS V4 did.)
Mark> It should be in the kpropd docs, but basically
Mark> $(prefix)/lib/krb5kdc/kpropd.acl needs to list the
Mark> principals (host/hostname@REALM) that can perform kprops...
I think it's hard coded as /krb5/kprod.acl in Beta 6. This is
fixed in the working source , I believe.
--Sam
