[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bug in kadmin
I just found it last week with 1.0.1, so I guess I should push out a
1.0.2 soon when I fixed this bug since it very very irritating.
Love
27 sep 2007 kl. 18.46 skrev Henry B. Hotz:
> This sounds like a bug I reported. I thought it was fixed in
> 1.0.1. It's purely client-side (and I was seeing it using kadmin
> with a 0.7.2 kadmind).
>
> On Sep 27, 2007, at 7:13 AM, Andreas Haupt wrote:
>
>> Hi,
>>
>> I'm a bit confused about how remote kadmin determines the user to
>> authenticate for admin operations. From the kadmin manpage:
>>
>> -p string, --principal=string
>> principal to authenticate as
>>
>> That's the reality with Heimdal 1.0.1:
>>
>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin list
>> ahaupt
>> root/admin@IFH.DE's Password:
>> kadmin: get ahaupt: Incorrect password
>>
>> Why does it ask for root/admin's password. I explicitly told it to
>> use
>> another admin principal. I don't want to use the "workaround":
>>
>> [brutus-vm10] ~ # kinit foo
>> Password for foo@IFH.DE:
>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin list
>> ahaupt
>> bla/admin@IFH.DE's Password:
>> ahaupt
>> [brutus-vm10] ~ # kdestroy
>> [brutus-vm10] ~ # /usr/heimdal/sbin/kadmin --principal=bla/admin list
>> ahaupt
>> root/admin@IFH.DE's Password:
>>
>> Stupid, isn't it?
>>
>> Cheers,
>> Andreas
>>
>> --
>> | Andreas Haupt | E-Mail: andreas.haupt@desy.de
>> | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/
>> ~ahaupt
>> | Platanenallee 6 | Phone: +49/33762/7-7359
>> | D-15738 Zeuthen | Fax: +49/33762/7-7216
>>
>