anyone have Kerberized mount working on Mac 10.12?

2017-02-24 Thread Charles Hedrick
The server seems to think the mount was OK, but the client says permission 
denied, and the log shows 
2017-02-24T13:16:28 set-error: 1: Access to home directory not allowed



Kerberos mailing list   Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: krb5.conf vs krb5.d/*.conf designs...

2017-02-24 Thread Charles Hedrick
Redhat IPA installations already do that. You don’t need any new features. Just 
start /etc/krb5.conf with

includedir /etc/krb5.conf.d/


On Feb 23, 2017, at 4:37 PM, Keith Jones 
> wrote:



Hiya,

My apologies for the newbie (and deeply naïve!) question but I've just joined 
the list because I can't find the google words to check if this has been 
discussed or explained to an idiot like me! :-).

Many distros (and packages) use a gently scaling concept where a system has a 
root "/etc/xxx,conf" file and then supports a "/etc/xxx.d/ " directory which 
contains multiple .conf files that are processed in traditional filename order 
(including paths directly seems to be going out of fashion). As Kerberos is 
security sensitive, I can imagine it might not be a very cool thing to support 
the "clobbering of settings" idea on any level, but it is rather flexible idea 
in real life to have config settings split into separate files and have things 
broken down into "override" global settings nicely.

 Are there any feature request conversations going about supporting a krb5.d/ 
directory?

Regards,

Keith

___
This email has been scanned by MessageLabs' Email Security System
on behalf of the University of Brighton. For more information see:
https://staff.brighton.ac.uk/is/computing/Pages/Email/spam.aspx


Kerberos mailing list   Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


Kerberos mailing list   Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos