Re: kadmin "privs" question

[Love <lha@stacken.kth.se>]

Alf Wachsmann <alfw@SLAC.Stanford.EDU> writes:

> On Tue, 29 Jul 2003, Love wrote:
>>
>> Alf Wachsmann <alfw@SLAC.Stanford.EDU> writes:
>>
>> > How do I remotely (i.e. not _on_ one of my KDCs) find out what
>> > privileges a certain account has?
>>
>> Right now, not at all. I agree that it might be useful to know remotely.
>> [...]
>> So, I guess the list of acls that the match the principal might be sent
>> back. That certainly would give you the information you want, but the
>> question is if that is want you/other wanted.
[...]
>               Attributes:
>               Privileges: delete, get, list, cpw, add, modify

But that would be:

		Privileges:
		*/*@E.KTH.SE    	delete, get, list, cpw, add, modify
		*/whatever@E.KTH.SE	get, list

I'm not sure that is how it should be exposed.

Love

PGP signature