Ksu and Operation not permitted

[Kevin Adams]

Hi, I have krb5 1.2.2-5 sort of working on a RH 7.0 system.

Everything works except ksu. Ksu works from root (of course) but not from a
normal id.

$ ksu root
ksu: Operation not permitted while selecting the best principal

$ ksu root -n principal
ksu: Operation not permitted while copying cache /tmp/krb5cc_212 to
FILE:/tmp/krb5cc_0.1

An ideas? Telnet, rsh, ftp and rcp all work, but not ksu.

Kevin Adams

[Mayers, Philip J]

chmod u+s /usr/kerberos/bin/ksu

i.e. ksu isn't setuid root, so of course doesn't work.

This is *INCREDIBLY* annoying - EVERY SINGLE ONE of RedHat's kerberos
updates puts the ksu back to 755 permissions, and you lose the ability to
ksu *every* time you update the kerberos RPM.

Regards,
Phil

+----------------------------------+
| Phil Mayers, Network Support |
| Centre for Computing Services |
| Imperial College |
+----------------------------------+

[Sam Hartman]

I assume that ksu is installed setuid root? If not, it won't work.