acls turned of in kadmin

Nils Achtergarde n.achtergarde at
Fri Aug 31 06:31:04 EDT 2007

Hi there,
On my kdc kadmin.local works fine, but in kadmin, I always get errors like

get_principals: Operation requires ``list'' privilege while retrieving list

This is my /etc/krb5kdc/kadm5.acl:

*/admin at BFK.LOC *

The path to the acl-file in /etc/krb5kdc/kdc.conf is set correctly.
This is the output of klist:
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: root/admin at BFK.LOC

Valid starting     Expires            Service principal
08/31/07 11:59:52  08/31/07 21:59:52  krbtgt/BFK.LOC at BFK.LOC
        renew until 09/01/07 11:59:48

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

What else, could be the problem?
Thanks in advance.
Nils Achtergarde

My public PGP-key:

More information about the krbdev mailing list