Thank you very much for your suggestion, however that did not seem to
work.
I first tried to remove the hash only (leaving the rest of the string
entact) - but I
was still able to login using Administrator and the non-kerberos password.
Next,
I tried to replace the entire line with exactly what you provided, except
jwaltha
was Administrator instead. That too, did not work ( I didn't expect it to)
Do you have any other suggestions? I really don't want to remove root
local
access. I've done that before and it really isn't fun.
Thank you :)
---------------
James Walthall Jr
IBM Host Integration Server Test / HATS
Outside: (919) 254-8869
Tieline: 444-8869
Research Triangle Park
Raleigh, North Carolina
Digant Kasundra <[EMAIL PROTECTED]>
03/18/2004 06:03 PM
To: James Walthall/Durham/[EMAIL PROTECTED],
"'[EMAIL PROTECTED] '" <[EMAIL PROTECTED]>
cc:
Subject: RE: Dual Login enabled using kerberos
Yes, you can do that in a number of ways. One way is to modify the
/etc/pam.d/system-auth file and remove the pam_unix statements but that
would be a very very bad idea because that would prevent root from logging
in. The better way would be to remove the persons password hash from the
/etc/shadow file and replace is with !!.
jwaltha:!!:5000:0:0::::::: should look something like that.
-----Original Message-----
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: 3/18/2004 3:37 PM
Subject: Dual Login enabled using kerberos
When I configure my redhat machine to login using kerberos, I have
noticed
that I can
login using both the local password that was established on the machine,
and the password
that I establish using the kdc-db. Is there a way to configure the
machine
such that it only
logs in using the kerberos db ?
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
