restricting principals to certain commands only (like ssh's "forced command")

Frank Cusack frank+krb at
Mon Jan 31 17:56:58 EST 2011

On 1/31/11 4:20 PM -0500 mikhail_teterin at wrote:
> On 31.01.2011 15:57, Frank Cusack wrote:
>> I recently added this support and will release it shortly.
> Thank you, Frank! Will this be an extension to the .k5login syntax, or
> something else? Yours,

It uses .k5users, exactly like ksu(1).

More information about the Kerberos mailing list