From owner-freebsd-current  Sun Nov  1 19:43:15 1998
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA24429
          for freebsd-current-outgoing; Sun, 1 Nov 1998 19:43:15 -0800 (PST)
          (envelope-from owner-freebsd-current@FreeBSD.ORG)
Received: from rip.psg.com (rip.psg.com [147.28.0.39])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA24421
          for <freebsd-current@freebsd.org>; Sun, 1 Nov 1998 19:43:11 -0800 (PST)
          (envelope-from randy@psg.com)
Received: from localhost (651 bytes) by rip.psg.com
	via sendmail with P:stdio/R:inet_resolve/T:smtp
	(sender: <randy>) (ident <randy> using unix)
	id <m0zaAtV-0008G3C@rip.psg.com>
	for <freebsd-current@freebsd.org>; Sun, 1 Nov 1998 19:43:05 -0800 (PST)
	(Smail-3.2.0.101 1997-Dec-17 #1 built 1998-Oct-13)
Message-Id: <m0zaAtV-0008G3C@rip.psg.com>
Date: Sun, 1 Nov 1998 19:43:05 -0800 (PST)
From: Randy Bush <randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: freebsd-current@FreeBSD.ORG
Subject: kerberos rlogin requires auth.conf
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

in kerberized rlogin there is the following fragment:

        k = auth_getval("auth_list");
        if (k && !strstr(k, "kerberos"))
            use_kerberos = 0;

this means that, for me to do a kerberos login from A to B, that A must
have 

    auth_list = .* kerberos

in /etc/auth.conf

i thought that auth.conf controlled how folk get access TO the system,
not from it.

randy

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message