Re: Bug in kadmin

[Love Hörnquist Åstrand <lha@kth.se>]

Hello,

There is a work-around (used in test-cases, the reason the error  
isn't caught by the regression tests.

kinit -S kadmin/admin@REALM foo/admin@REALM
kadmin -p foo/admin@REALM -r REALM

Love



30 sep 2007 kl. 12.10 skrev Love Hörnquist Åstrand:

> I just found it last week with 1.0.1, so I guess I should push out  
> a 1.0.2 soon when I fixed this bug since it very very irritating.
>
> Love
>
> 27 sep 2007 kl. 18.46 skrev Henry B. Hotz:
>
>> This sounds like a bug I reported.  I thought it was fixed in  
>> 1.0.1.  It's purely client-side (and I was seeing it using kadmin  
>> with a 0.7.2 kadmind).
>>
>> On Sep 27, 2007, at 7:13 AM, Andreas Haupt wrote:
>>
>>> Hi,
>>>
>>> I'm a bit confused about how remote kadmin determines the user to
>>> authenticate for admin operations. From the kadmin manpage:
>>>
>>> -p string, --principal=string
>>>              principal to authenticate as
>>>
>>> That's the reality with Heimdal 1.0.1:
>>>
>>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin  
>>> list
>>> ahaupt
>>> root/admin@IFH.DE's Password:
>>> kadmin: get ahaupt: Incorrect password
>>>
>>> Why does it ask for root/admin's password. I explicitly told it  
>>> to use
>>> another admin principal. I don't want to use the "workaround":
>>>
>>> [brutus-vm10] ~ # kinit foo
>>> Password for foo@IFH.DE:
>>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin  
>>> list
>>> ahaupt
>>> bla/admin@IFH.DE's Password:
>>> ahaupt
>>> [brutus-vm10] ~ # kdestroy
>>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin  
>>> list
>>> ahaupt
>>> root/admin@IFH.DE's Password:
>>>
>>> Stupid, isn't it?
>>>
>>> Cheers,
>>> Andreas
>>>
>>> -- 
>>> | Andreas Haupt             | E-Mail: andreas.haupt@desy.de
>>> |  DESY Zeuthen             | WWW:    http://www-zeuthen.desy.de/ 
>>> ~ahaupt
>>> |  Platanenallee 6          | Phone:  +49/33762/7-7359
>>> |  D-15738 Zeuthen          | Fax:    +49/33762/7-7216
>>>
>>
>