Date: Sat, 19 Mar 2005 13:53:58 -0600 From: Kirk Strauser <kirk@strauser.com> To: freebsd-questions@freebsd.org Subject: ksu doesn't use my ticket Message-ID: <200503191354.38712.kirk@strauser.com>
next in thread | raw e-mail | index | archive | help
--nextPart5854584.Nr0Z8ZzaPd
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
I have a working kdc on my LAN and use OpenSSH's "gssapi-with-mic"=20
authentication to connect to other machines. However, I can't=20
use /usr/bin/ksu to su to root without entering root's password, even if I=
=20
have a current, valid ticket and am listed in root's .k5login;
$ sudo cat /root/.k5login
# $FreeBSD: src/etc/root/dot.k5login,v 1.1 2003/04/30 20:58:49 markm Exp $
#
# user1/root@YOUR.REALM.WHEREVER
# user2/root@YOUR.REALM.WHEREVER
kirk@HONEYPOT.NET
$ klist
Credentials cache: FILE:/tmp/krb5cc_1000
Principal: kirk@HONEYPOT.NET
Issued Expires Principal
Mar 19 13:41:03 Mar 19 23:41:03 krbtgt/HONEYPOT.NET@HONEYPOT.NET
$ ksu
root's password:
Sorry!
Shouldn't that be sufficient to allow me to become root without entering an=
y=20
passwords, or am I missing something? This is somewhat exacerbated by the=
=20
fact that I can't seem to find ksu's man page or other documentation on my=
=20
system.
=2D-=20
Kirk Strauser
--nextPart5854584.Nr0Z8ZzaPd
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)
iD8DBQBCPIN+5sRg+Y0CpvERAtpiAJ9RiLYoB+w2kdB3eekBf8GhJdlm7gCgjVkc
/j6xXpRc4CCuLJOnR/j5/VU=
=Xnys
-----END PGP SIGNATURE-----
--nextPart5854584.Nr0Z8ZzaPd--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200503191354.38712.kirk>