> >> No, that's the whole point... If using sudo/su/ksu, then it > >> works. But I have two 'help admins' (ie, ordinary users which > >> help out with bits and pieces) that I don't want to give > >> sudo/su rights to... > > Andreas> Then you can't use kdamin.local, just kadmin. Have them > Andreas> use kadmin and it will work just fine.
One thing that's important to understand is that kadmin.local accesses the database directly, instead of going through kadmind. So it needs permission to read/write the database file ... which is why you were getting "Permission denied" (I think that's a bug that it says "Authenticating as principal ..." when using kadmin.local). >Hmmm... I'm _QUITE_ sure I tried that, but... > > >[papadoc.pts/3]$ kadmin -p [EMAIL PROTECTED] >Authenticating as principal [EMAIL PROTECTED] with password. >Enter password: >kadmin: I don't understand ... this looks like it works to me. --Ken _______________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos