Re: Authorising via non-root user

2002-12-17 Thread Sergei Grigoriev
ROTECTED]... Try to set KRB5_KTNAME='/path/to/user/accessible/keytab/file/for/that/service' in your service daemon's environment. Sergei Grigoriev wrote: What do I need to do in order to allow a non-root user to run this daemon and successfully test incoming service tickets vi

Authorising via non-root user

2002-12-16 Thread Sergei Grigoriev
Dear All I have set up a kerberised service on a Linux platform, but I ideally don't want to run the service daemon as root. What do I need to do in order to allow a non-root user to run this daemon and successfully test incoming service tickets via GSSAPI? Thanks all in anticipation. Sergei

Interpreting gss_accept_sec_context results

2002-12-14 Thread Sergei Grigoriev
Dear all Sorry to ask such a simple question, but I just want to be certain of this. I called gss_accept_sec_context and received a return value of 851968 (0xd). Can anyone decipher what this means in terms of result codes, as I seem to have difficulty in interpreting the codes in gssapi.h