Re: .k5login and only allow rcp

2002-06-21 Thread Turbo Fredriksson
Turbo == Turbo Fredriksson [EMAIL PROTECTED] writes: Turbo tuzjfi:~# cat .k5users [EMAIL PROTECTED] /bin/ls Saw it... 's@\.com@\.COM@' :) -- arrangements SDI [Hello to all my fans in domestic surveillance] pits strategic tritium counter-intelligence Mossad World Trade Center

Re: .k5login and only allow rcp

2002-06-21 Thread Turbo Fredriksson
Ken == Ken Grady [EMAIL PROTECTED] writes: Ken Try the .k5user to specify what an account can run Unfortunately it seems that 'rcp' (kshd) don't LOOK at .k5users, only .k5login (which don't allow me to specify a command to allow). -- critical Marxist NORAD smuggle Treasury genetic

Re: Building from source question (krb5 1.2.5) ...

2002-06-21 Thread Jerry Heyman
In article ae7ssp$fn7$[EMAIL PROTECTED], [EMAIL PROTECTED] (Jerry Heyman) writes: I don't know if this is the right place to ask, so I'll do so (and expect corrections). I've downloaded the source from MIT and have been able to finagle configure to work on almost all the platforms that I need

Re: Building from source question (krb5 1.2.5) ...

2002-06-21 Thread Sam Hartman
Jerry == Jerry Heyman [EMAIL PROTECTED] writes: Jerry I've now confirmed that Dynix/PTX has a bad socket() (and Jerry friends) implementation. All the other software we've Jerry written makes use of TLI instead. Jerry Can Kerberos be built in a TLI only environment? No.

Re: Building from source question (krb5 1.2.5) ...

2002-06-21 Thread Jerry Heyman
On 21 June 2002 at 13:23, Sam Hartman [EMAIL PROTECTED] wrote: Jerry == Jerry Heyman [EMAIL PROTECTED] writes: Jerry I've now confirmed that Dynix/PTX has a bad socket() (and Jerry friends) implementation. All the other software we've Jerry written makes use of TLI instead.

Keytab problems

2002-06-21 Thread James M Craig
I have started running some experiments on a few machines in hopes of deploying Kerberos throughout our department. We are running Solaris 8, and I am using SEAM 1.0.1 on the test systems. Since I am learning this on my own, some things are not as obvious to me as I think they should be. My

Re: Keytab problems

2002-06-21 Thread James Craig
On Fri, 21 Jun 2002, Sam Hartman wrote: When you add a key to a keytab file, that key is randomized by the server before being added. You do not want to put user principals in keytab files. Instead, you want to create a principal for the explicit purpose of living in a keytab.

Re: Building from source question (krb5 1.2.5) ...

2002-06-21 Thread Donn Cave
Quoth [EMAIL PROTECTED] (Sam Hartman): | No. Kerberos has no TLI support at all. | | Obviously you could write this support since you have the source, but | that would be significant work. Our PTX machine went out via the loading dock many years ago, and I have only vague memories of it. One

Re: Keytab problems

2002-06-21 Thread Sam Hartman
James == James Craig [EMAIL PROTECTED] writes: James Thank you for your help before. James I don't want to pester you or the newsgroup with what James may be newbie questions... what is the best place/way to James get them answered? Well, obviously the best way is