Is FQDN a must ?????????

2004-07-28 Thread mdj_kerberos
hi all, I would like to know whether FQDN is a must for kerberos??? thank you Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

ACLs question

2004-07-28 Thread Bob Dowling
I'm running a KCD/kadmind on a Fedora box using Fedora's packages (1.3.1 release 6) and am having problems with my wildcarded ACLs. My situation is that I have a DNS domain with a very large number of subdomains (and subsubdomains etc. ad nauseam) whose computers may require host principals.

RE: Solaris pam-krb5 client and MIT krb5 KDC on Linux (Eliot Lebsack)

2004-07-28 Thread Eliot Lebsack
Henry, Thanks for going through this with me. In response to your questions: 1) Can the user (once logged in) do a kinit? (If not check krb5.conf permissions, and contents.) When I su - username from root, and do a kinit, the ticket is granted by the KDC correctly. 2) Can the user (once

RE: Solaris pam-krb5 client and MIT krb5 KDC on Linux (Eliot Lebsack)

2004-07-28 Thread Eliot Lebsack
Rodolfo, Here's my pam.conf file - It's pretty close to the pam.conf file which ships with Solaris 8, 2/02 version. # #ident @(#)pam.conf 1.1601/01/24 SMI # # Copyright (c) 1996-2000 by Sun Microsystems, Inc. # All rights reserved. # # PAM configuration # # Authentication management #

Re: ACLs question

2004-07-28 Thread Sam Hartman
Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas FNAL (fnal.gov) has a mod to Douglas src/lib/kadm5/srv/server_acl.c: Douglas /* * acl_match_data_sub() See if two data entries match Douglas * * But compare as a domain name, which allows Douglas wildcarding *

Re: Solaris pam-krb5 client and MIT krb5 KDC on Linux (Eliot Lebsack)

2004-07-28 Thread Henry B. Hotz
On Jul 28, 2004, at 5:34 AM, Eliot Lebsack wrote: Henry, Thanks for going through this with me. In response to your questions: 1) Can the user (once logged in) do a kinit? (If not check krb5.conf permissions, and contents.) When I su - username from root, and do a kinit, the ticket is granted by