[857] in Moira
Problems with kerberos-acl
daemon@ATHENA.MIT.EDU (Jonathan Kamens)
Thu Feb 9 09:58:03 1995
Date: Thu, 9 Feb 1995 10:01:07 -0500
From: Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>
To: owner-kerberos@MIT.EDU
Cc: bug-moira@MIT.EDU
I recently set up mail on my machine at home, and I changed my MIT
forwarding address to my home address
(jik@annex-1-slip-jik.cam.ov.com), so that personal mail would be sent
to my home machine instead of to work.
Unfortunately, that means that owner-kerberos mail started getting
sent to my home machine too, something that I didn't intend.
"Fine," I said to myself, "I'll just modify kerberos-acl by adding
`jik@annex-1-slip-jik.cam.ov.com' and `KERBEROS:jik@ATHENA.MIT.EDU' to
it, and deleting `jik' from it."
Well, I did that, and it no longer things that I'm on kerberos-acl,
i.e., it will no longer allow me to view kerberos-acl or modify the
kerberos list. This implies to me that Moira does not pay attention
to KERBEROS:princ entries when deciding access permissions. Is this
true? If so, then what's the point of having entries of type
"KERBEROS:".
In any case, I'd appreciate if someone would add my username back to
kerberos-acl. Can anyone suggest a way that I can be on kerberos-acl
so that I can maintain the list, but still receive bounce notices from
it at work rather than at home, without changing my MIT forwarding
address back to jik@cam.ov.com?
jik