Edit the Kerberos Admin Server ACL config

Edit the Kerberos Admin Server ACL config

In the kdc.conf we saw a value: acl_file = /var/lib/kerberos/krb5kdc/kadm5.acl. In this file we can define who has the right to read or change something in our kerberos database (we will create that database later). Detailed information about this ACL (access control list) are in the manpage of kadmind or the kerberos adminguide. To be simple we want to allow all admins to do all in our kerberos database. Edit the file to:

*/admin@REDFLO.DE      *

This can be read as "allow all(=*) admins in the realm REDFLO.DE everything (=*). So where is here the username? Is admin a Unix group?

Erstellt von system. Letzte Änderung: Samstag Juli 23, 2005 12:37:40 GMT-0000 by admin.