kerberos & cron - specifically nfsv4 w/sec=krb5p

Frank Cusack frank at linetwo.net
Tue Sep 18 22:05:34 EDT 2012


On Tue, Sep 18, 2012 at 2:00 PM, Matt Garman <matthew.garman at gmail.com>wrote:

> === SERVER MACHINE, ROOT TERMINAL ===
> ...
> mech: krb5, hndl len: 4, ctx len 85, timeout: 1348001077 (116 from
> now), clnt: *matt at cron*, uid: -1, gid: -1, num aux grps: 0:
>

That's interesting.  I wonder if that's a debug artifact or if svcgssd
isn't properly handling instances.  What does the debug output look like
(princ name and uid mapping result) with just matt@ instead of matt/cron@?


More information about the Kerberos mailing list