Kerberos authentication...

Kirk Bauer kirk at kaybee.org
Sat Nov 1 01:35:29 GMT 1997


On Tue, 28 Oct 1997, Johan Hedin wrote:

> I have done such a patch for Kerberos 4 and submitted it to samba-bugs.
> You'll find it at
> 
> ftp://ftp.pdc.kth.se/pub/krb/contrib/

It seems to work okay except for one thing:

I have 3 accounts on the local system.  They are 'root', 'kirk' and
'miles'.  If any of these 3 users connect, then the KRB4 module in
password.c gets the appropriate username as the remote user.  

*But* if a user that exists only on the Kerberos server (such as
'gt5918a'), this_user is 'nobody' by time it gets to the KRB4 part
of password.c...

In other words, even though I am using Kerberos authentication, the
remote user somehow gets resolved to 'nobody' if the username is not
in /etc/passwd *before* the KRB4 portion of password.c even gets it.

How do I stop this?

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Kirk Bauer -- Georgia Tech -- kirk at kaybee.org <== Finger for PGP
   http://www.kaybee.org/~kirk/html        ResNet RTA



More information about the samba mailing list