Reputation
2,640
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
1 9 15
Impact
~148k people reached

  • 0 posts edited
  • 0 helpful flags
  • 45 votes cast
1d
revised How can I use different kerberos principals for sudo than for system-auth?
added 506 characters in body
1d
comment How can I use different kerberos principals for sudo than for system-auth?
I was referring to the krb5_map_user option (see the sssd-krb5 man page). I wasn't aware of full_name_format, so if that works, bonus! Also, see the update I am about to leave on the answer.
1d
comment How can I use different kerberos principals for sudo than for system-auth?
So, "SSSD domain" != "Kerberos domain". An SSSD "domain" basically means "a section of the configuration file", and you can have multiple domains pointing at the same Kerberos domain. This is different from what you can do with pam_krb5. User <-> principal mappings are definitely not global options (they are per SSSD domain). I don't know for certain it will work, but I think it might.
2d
answered How can I use different kerberos principals for sudo than for system-auth?
Jul
13
awarded  Famous Question
Apr
13
awarded  Good Question
Mar
24
comment procmail and libnotify: how to display emails received?
Do you get any error messages in your procmail log?
Feb
22
awarded  Yearling
Feb
20
comment how to run bash script from isolinux.cfg
You need to actually boot Linux before you can run bash. There is no shell interpreter available in your pre-boot environment. Can you explain what it is you're trying to accomplish?
Feb
18
answered GPG agent doesn't remove my SSH key from the keyring
Jan
10
awarded  Self-Learner
Sep
8
awarded  Enlightened
Sep
8
awarded  Nice Answer
Jul
2
awarded  Curious
Jun
24
awarded  Nice Answer
Mar
12
comment Trouble setting up wireless fedora 17
Emphasizing what slm said: Since F17 is past its end-of-life, it no longer receives any sort of updates, including security updates. So if for example someone was to discover a critical SSL vulnerability, you're not going to get fixes. F20 is the current release, and F21 is coming Real Soon Now.
Feb
22
awarded  Yearling
Feb
2
awarded  Enlightened
Feb
2
awarded  Nice Answer
Aug
30
comment control apache referrer to restrict downloads in htaccess file
Please remember that referrer restrictions are only useful for preventing unsophisticated people from accessing a site. Anyone mildly familiar with HTTP will be able to fake the necessary headers and access the server anyway.