Date: Sat, 19 Mar 2005 13:53:58 -0600 From: Kirk Strauser <kirk@strauser.com> To: freebsd-questions@freebsd.org Subject: ksu doesn't use my ticket Message-ID: <200503191354.38712.kirk@strauser.com>
index | next in thread | raw e-mail
[-- Attachment #1 --]
I have a working kdc on my LAN and use OpenSSH's "gssapi-with-mic"
authentication to connect to other machines. However, I can't
use /usr/bin/ksu to su to root without entering root's password, even if I
have a current, valid ticket and am listed in root's .k5login;
$ sudo cat /root/.k5login
# $FreeBSD: src/etc/root/dot.k5login,v 1.1 2003/04/30 20:58:49 markm Exp $
#
# user1/root@YOUR.REALM.WHEREVER
# user2/root@YOUR.REALM.WHEREVER
kirk@HONEYPOT.NET
$ klist
Credentials cache: FILE:/tmp/krb5cc_1000
Principal: kirk@HONEYPOT.NET
Issued Expires Principal
Mar 19 13:41:03 Mar 19 23:41:03 krbtgt/HONEYPOT.NET@HONEYPOT.NET
$ ksu
root's password:
Sorry!
Shouldn't that be sufficient to allow me to become root without entering any
passwords, or am I missing something? This is somewhat exacerbated by the
fact that I can't seem to find ksu's man page or other documentation on my
system.
--
Kirk Strauser
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)
iD8DBQBCPIN+5sRg+Y0CpvERAtpiAJ9RiLYoB+w2kdB3eekBf8GhJdlm7gCgjVkc
/j6xXpRc4CCuLJOnR/j5/VU=
=Xnys
-----END PGP SIGNATURE-----
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200503191354.38712.kirk>