Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 7 Nov 1995 10:51:06 -0500
From:      "Garrett A. Wollman" <wollman@lcs.mit.edu>
To:        Mark Stout <mcs@vpm.com>
Cc:        FreeBSD Questions <questions@freebsd.org>, jkh@freebsd.org
Subject:   Kerberos? Where is it?
Message-ID:  <9511071551.AA14916@halloran-eldar.lcs.mit.edu>
In-Reply-To: <199511070521.VAA29018@netcom4.netcom.com>
References:  <199511070521.VAA29018@netcom4.netcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Mon, 06 Nov 1995 21:21:53 -0800, Mark Stout <mcs@vpm.com> said:

> I keep seeing kerberos and I don't remember adding it as an option in my
> kernel nor do I remember installing it as a package.

If you selected the appropriate distributions containing encryption,
one of them gave you Kerberos.  It should have said so on the menu.

>  It doesn't appear to
> be fully installed, but I keep seeing it.  Initially I saw it when I ran
> 'su' and still do.  The message is: 

>     'su: kerberos: not in root's ACL.'  

> What does that mean?

It means that you are not in ~root/.klogin, so you are not allowed to
do a Kerberized `su' to root.  (Even when configured, Kerberized `su' is
broken in this way.)

> It used to take about 20-25 seconds to login after entering my password, but
> I commented out all references to it in the /etc/services file and I can
> login quickly like I should, only now I see a warning message:

>     Warning: no Kerberos tickets issued.     

Perhaps the system was mistakenly shipped with an /etc/krb.conf file.
This file MUST NOT exist except when Kerberos is being used, because
the default version tells the client programs that you are in the
CS.Berkeley.EDU realm, which you unquestionably are not.  The message
is simply telling you, ``I think you have Kerberos configured, but I
tried to authenticate you and it didn't work.''

> Where is this Kerberos?  Can any of this be attributed to my inability to
> get wu_ftpd to work right using the ftpaccess file for restricted FTP logins?

No.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9511071551.AA14916>