[EMAIL PROTECTED] wrote:
> 530 GSSAPI user root/[EMAIL PROTECTED] is not authorized as tetsu; Access > denied. > Login failed. > > As Markus pointed out you need a .k5login But root does not normally have a Kerberos principal, as root is more machine specific with each machine having root but root on one is not related to root on another. Most Kerberos commands will let you use different local username and kerberos principals. like ssh with gssapi, ssh -l username host will use your kerberos tickets with your principal th login to host with the username. In this case the ~username/.k5login should contain a line with your principal. Think of the .k5login as the ACL for access to the account. > > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos > > -- Douglas E. Engert <[EMAIL PROTECTED]> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
