kadmin ignoring target column ?

Laura Smith <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.general
Message-ID <u0YRw6QNODZjvdlkv9Y-uiLN5ACBt1RrqutUG_CDLmnWXTVbz_bSccIXVYb1MvunwaQTn6T_IrrrTdp5GV6J2fZ9p29KerzqpxGmzdF1J_k=@protonmail.ch>
Hi,

I am trying to create a suitably restricted user for use with configuration automation (SaltStack ).  My line looks like the following :

saltstack/[email protected] ADMCIL nfs/*@EXAMPLE.COM

I have edited kadm5.acl and restarted kadmind, however list_princs returns a list of all principals, not just nfs/* ?

If I remove the target column (i.e. saltstack/[email protected] ADMCIL)  and restart kadmind, then ADMCIL operates as expected (blocks list_princs entirely).

What am I missing ?

Laura

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.