Heilke, Rainer wrote:

possibly 'su' with pam_krb5 for the authentication.  Its not quite
the same as 'ksu', though.


Douglas says the same. The su man page indicates something about this,
but not a lot of details there. I'll look into this further. As far as a
co-worker is concerned (and in our environment, I can see his point),
this would be a show stopper. We use ksu for all sorts of things,
including giving DBA's access to Oracle ID's.

Thanks again for all of the help. I'll go through the su and pam.conf
man pages, and see if I can figure it out.

Make sure you have a root window open before testing PAM. I stumbled on this when I tried to su and my test pam exit failed!



Rainer

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos




--

 Douglas E. Engert  <[EMAIL PROTECTED]>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439
 (630) 252-5444
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to