On a regular linux machine, when I use
sudo -s as a normal user, I become root but
HOME still points to
~user, so every admin has his own environment etc. (this is without
On a system where the home directories live on an AFS file system, this also works, if the environment variable
KRB5CCNAME is preseved, as root can read this file in
But if I use
sudo on such a system to change a local non-root user (e.g. the dedicated user for a certain service), the new user cannot access the kerberos cache (as it is owned by the old user and has mode 600). But if I
unset KRB5CCNAME && kinit user && aklog && exec bash, I have access to my environment again.
So the question is: Is there a clean way to make sudo take the kerberos tickets that I had before and add them to the kerberos ticket cache of the new user?