[8070] in Kerberos
beta7 kadmin related buglets
daemon@ATHENA.MIT.EDU (Malcolm Beattie)
Fri Sep 20 10:33:55 1996
To: kerberos@MIT.EDU
Date: 20 Sep 1996 13:15:58 GMT
From: mbeattie@sable.ox.ac.uk (Malcolm Beattie)
A buglet and a misfeature with beta7 kadmin stuff.
(1) With beta7 kadmin, "getprivs" always prints
current privileges: GET ADD MODIFY DELETE
regardless of actual privileges. For example, with acls set to
give mbeattie/admin all privileges and mbeattie none:
% kadmin -p mbeattie
Enter password:
kadmin: getprivs
current privileges: GET ADD MODIFY DELETE
kadmin: addprinc -randkey foo/bar
add_principal: Operation requires ``add'' privilege while creating "foo/bar@OX.AC.UK".
% kadmin -p mbeattie/admin
Enter password:
kadmin: getprivs
current privileges: GET ADD MODIFY DELETE
kadmin: addprinc -randkey foo/bar
Principal "foo/bar@OX.AC.UK" created.
(2) kadmind needs restarting when the ACL file is changed. A SIGHUP
doesn't trigger a re-read, either.
--Malcolm
--
Malcolm Beattie <mbeattie@sable.ox.ac.uk>
Oxford University Computing Services
"Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee
