k5login & root

Richard E. Silverman res at qoxp.net
Thu Feb 28 21:33:18 EST 2008


>>>>> "SM" == Steven Miller <stevenraymillerjr at yahoo.com> writes:

    SM> It looks as if root needs to be a principal in the realm, before
    SM> using a k5login file to allow users to become root. Is this
    SM> correct?

No -- root is a Unix account to which you are giving certain principals
access, but placing those principals' names in ~root/.5login.  There's no
need for a principal corresponding to the root account.

    SM> Assuming that it is, I want root's password to be managed
    SM> locally (i.e not via kerberos), is there a way to do this? I would
    SM> guess it might involve a keytab?

    SM> thanks in advance,

    SM> Steven


    SM>       ____________________________________________________________________________________
    SM> Be a better friend, newshound, and know-it-all with Yahoo! Mobile.
    SM> Try it now.
    SM> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ


-- 
  Richard Silverman
  res at qoxp.net




More information about the Kerberos mailing list