From owner-freebsd-current Mon Mar 11 12:43:37 1996 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id MAA13627 for current-outgoing; Mon, 11 Mar 1996 12:43:37 -0800 (PST) Received: from grumble.grondar.za (grumble.grondar.za [196.7.18.130]) by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id MAA13599 for ; Mon, 11 Mar 1996 12:43:21 -0800 (PST) Received: from grumble.grondar.za (mark@localhost [127.0.0.1]) by grumble.grondar.za (8.7.4/8.7.3) with ESMTP id WAA04844; Mon, 11 Mar 1996 22:42:21 +0200 (SAT) Message-Id: <199603112042.WAA04844@grumble.grondar.za> To: "Garrett A. Wollman" cc: freebsd-current@freebsd.org Subject: Re: HEADS UP! Please check... Date: Mon, 11 Mar 1996 22:42:20 +0200 From: Mark Murray Sender: owner-current@freebsd.org X-Loop: FreeBSD.org Precedence: bulk "Garrett A. Wollman" wrote: > >> Okay, kerberos is installed but not configured... but shouldn't this work? > > > No. tell it not to use kerberos with `su -K'. > > Actually, as the person who requested this change to begin with, I > believe that this case /should/ work. It's something that didn't come > up in the original MIT code since it uses separate `su' and `ksu' > programs. Hmm... My philosohy on this one was that if there was not an acl entry for the guy, no matter what, then he wasn't allowed in. I'm sure I could look for the above case and add it in. Others' comments? How does this new variant "feel" to you? M -- Mark Murray 46 Harvey Rd, Claremont, Cape Town 7700, South Africa +27 21 61-3768 GMT+0200 Finger mark@grondar.za for PGP key