Kerberos-Gssapi-ldap-pam interaction

[Tillman]

On Wed, May 14, 2003 at 02:54:23PM +0000, Jerome Walter wrote:
> >    Jerome> Finally, is there something special to do to make sudo and
> >    Jerome> ssh not requiring entering the password again ?
> >    Jerome> try_first_pass does not seem to work...
> > 
> > I don't care. I use 'ksu' instead :)
> 
> Yep, but my administrator won't give the root password to the students who,
> like me, have some rights to rm, kill, renice or reboot some stations when
> needed (some other students do not use their unix account very properly ;)

`ksu` does that - it has a similar fine-grained control mechanism. A
user could be given the ability to run `rm` but not `passwd`, not
example.

-T

-- 
To know what one ought to do is not enough.
	- Prince Rhombur Vernius