[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Should kadmin ask for password

To: "=?UTF-8?Q?Love_H=C3=B6rnquist_=C3=85strand?=" <lha@kth.se>
Subject: Re: Should kadmin ask for password
From: "Hai Zaar" <haizaar@gmail.com>
Date: Mon, 20 Nov 2006 11:48:32 +0200
Cc: heimdal-discuss@sics.se
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Gyr3uYe22cXad+zZr5t9l6nLWIequMpy1uZof1JbilLg++8S5YIY3hhdVdFEhiOkfz3ISWEi8YD8fxR8x5xcD16LsVTVtiYjT5NaHi9JqYNVCGVFXEvUCY4goTrjehrDhVMBJN6zGizyNXRgzaZ5Nr/99SBHKQ6U+6DFruyu1yg=
In-Reply-To: <1C084855-9BA6-4D9B-8A80-98795BEE599C@kth.se>
References: <cfb54190611161000s2bd18f24j529dcb4857e68d37@mail.gmail.com> <51901B50-1569-4055-B0B0-F115FA65257E@kth.se> <cfb54190611200009o2fcd79d4ld54e0361ca02d5a6@mail.gmail.com> <1C084855-9BA6-4D9B-8A80-98795BEE599C@kth.se>
Sender: owner-heimdal-discuss@sics.se

Here is the thing:If principal has '/admin' in its name - it all works smoothly. I.e.renaming haizaar to haizaar/admin, or using root/admin did the trick.Even regular kinit works - kadmin automatically acquires kadmin/adminticket.
How do I disable this "feature" ?
2006/11/20, Love HÃ¶rnquist Ã…strand <lha@kth.se>:
> Sorry, I can't reproduce that.>> Love>> $ kinit -S kadmin/admin@SU.SE lha/admin@SU.SE> lha/admin@SU.SE's Password:> $ klist> Credentials cache: API:1>          Principal: lha/admin@SU.SE>>    Issued           Expires          Principal> Nov 20 09:28:03  Nov 20 10:28:03  kadmin/admin@SU.SE>> $ kadmin -p lha/admin -r SU.SE> kadmin> get lha>              Principal: lha@SU.SE>      Principal expires: never> ...>>>>>

-- Zaar

References:
- Should kadmin ask for password
  - From: "Hai Zaar" <haizaar@gmail.com>
- Re: Should kadmin ask for password
  - From: Love Hörnquist Åstrand <lha@kth.se>
- Re: Should kadmin ask for password
  - From: "Hai Zaar" <haizaar@gmail.com>
- Re: Should kadmin ask for password
  - From: Love Hörnquist Åstrand <lha@kth.se>

Prev by Date: Re: Running kdc as unprivileged user
Next by Date: Re: config option inconsistencies
Prev by thread: Re: Should kadmin ask for password
Next by thread: pki-mapping file
Index(es):
- Date
- Thread