Granting su rights to users? Using PAM and Kerberos...

[Bohmer, Andre ten]

Hi,
 
Maybe you have to enable local authorization sufficient in order to use su? We're using kerberos v5 to authenticate Linux accounts against Active Directory, and had a similar problem on Red Hat EL AS 4.
Sorry for the very bad quoting, using OWA ...
 
Cheers,
Andre

	-----Original Message----- 
	From: fedora-list-bounces at redhat.com on behalf of Daniel B. Thurman 
	Sent: Mon 11/21/05 22:12 
	To: For users of Fedora Core releases (E-mail) 
	Cc: 
	Subject: Granting su rights to users? Using PAM and Kerberos...
	
	


	Hmm..  I enabled Kerberos and setup pam files to use kerberos 
	authenications, and I also added root principal (root at REALM) but 
	I am still being prevented as a normal user to use 'su' 

	I have been all over google and tried to find a solution but there 
	was none to be found.  I did see for BSD that you can use the 
	kdb_edit command to add per user , root permissions but I think 
	that is for Kerberos IV only. 

	I am beginning to wonder if kerberos is even worth it anymore or 
	if it is being replaced with something else like the Directory Service? 
	No one seems to be talking much about kerberos in this newsgroup 
	so it seems. 

	Anyway - can someone please shed some light here so that 
	I can at least su root as a normal user? 

	Kind regards, 
	Dan Thurman 

	-- 
	No virus found in this outgoing message. 
	Checked by AVG Free Edition. 
	Version: 7.1.362 / Virus Database: 267.13.4/176 - Release Date: 11/20/2005 
	  

	-- 
	fedora-list mailing list 
	fedora-list at redhat.com 
	To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 5782 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20051121/a1ef7764/attachment-0001.bin>