Andrew T <[email protected]> writes:
> Wow. Now I am really embarrassed, since the solution is in the wiki:

No, don't be embarrassed -- I just added that to the wiki last night.

> klist showed that my tickets weren't forwardable.  Using a "kinit -f"
> fixes the problems, since the "forwardable" flag is not in my
> /etc/krb5.conf.

Great.  Now we know what to watch out for in the future.

The real root problem here is that if you attempt to delegate
non-forwardable tickets, the openssh client silently disobeys you
rather than logging some sort of error or warning.  I will report this
as a bug against openssh.

  - a


_______________________________________________
HCoop-Help mailing list
[email protected]
https://lists.hcoop.net/listinfo/hcoop-help

Reply via email to