Move kadmin and ktutil to bin from sbin?

Jeffrey Altman jaltman at secure-endpoints.com
Tue Apr 29 00:24:10 EDT 2008


Russ Allbery wrote:
> We have a request against the Debian package to move kadmin and ktutil to
> /usr/bin from /usr/sbin on the grounds that both programs are usable by
> people who are not administrators of the local machine. [1]  The FHS
> definition of the difference between bin and sbin is about whether the
> program is only usable by local system administrators, not a more general
> administrator (such as a Kerberos administrator).  Also, even apart from
> that, many sites have policies that allow normal users to use kadmin
> and/or ktutil for (e.g.) sub-principals associated with their accounts.
> 
> I'd prefer to match what you do here rather than having Debian put these
> binaries someplace different.  What would you think about moving both
> kadmin and ktutil to $(CLIENT_BINDIR) and their man pages similarly to
> section 1 and $(CLIENT_MANDIR)?  I can create the patch for 1.7 if this
> seems reasonable.
> 
> [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=477296
> 
I would be in favor of such a change.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20080429/eff14fdd/attachment.bin


More information about the krbdev mailing list