KSU(1) KSU(1) (NAME) ksu - (Kerberized su) (SYNOPSIS) ksu [ __ ] [ -n _ ] [ -k ] [ -z | -Z ] [ -q ] [ -l _ ] [ -c _ ] [ -a [ [ ... ] ] ] (REQUIREMENTS) ksu (Kerberos version 5) . ksu . (DESCRIPTION) ksu ( root) . ksu su : (real and effective UID) (security context) . : <<>> ( << >> << >> ) . <<>> . (AUTHENTICATION) ksu : (Authentication) (Authorization). (Principal) . -n ( -n jqpublic@USC.EDU) ( -n) . ksu root . (.) ( ksu .). (root) . ksu . (End-Server) (TGT) (Realm) . . TGT TGT . ksu GET_TGT_VIA_PASSWD TGT . . GET_TGT_VIA_PASSWD . (AUTHORIZATION) ksu -e . -e . ksu . ksu : .k5login(5) .k5users. .k5login . : jqpublic@USC.EDU jqpublic/secure@USC.EDU jqpublic/admin@USC.EDU .k5users ( -e ). .k5login . ksu .k5users . (*) . .k5login .k5users . aname->lname . . (EXECUTION OF THE TARGET SHELL) ksu su . USER HOME SHELL. root USER USER . HOME SHELL . KRB5CCNAME . . () ( passwd ). ksu ( ksu -k ). fork exec su exec . (CREATING A NEW SECURITY CONTEXT) ksu ( -e ) . (Credentials) . . -z -Z . -z . -Z ( ) . root root -z . root . -n ( -Z GET_TGT_VIA_PASSWD ). TGT . ( ) ksu ( TGT ). ksu . : . (OPTIONS) -n target_principal_name . ksu . ksu -n (Heuristic) : o : root . . target_user@local_realm . ~target_user/.k5users ~target_user/.k5login target_user_login_name@local_realm . ksu . : a. b. target_user@local_realm c. source_user@local_realm a c . . ksu PRINC_LOOK_AHEAD : (realm) . (a) jqpublic@ISI.EDU jqpublic/secure@ISI.EDU jqpublic/secure@ISI.EDU . o : root . root target_user@local_realm . . root@local_realm . -c source_cache_name ( -c FILE:/tmp/my_cache). -c KRB5CCNAME . KRB5CCNAME krb5cc_ . krb5cc_.(gen_sym()) gen_sym . : krb5cc_1984.2 -k ( -e) . -k ksu . -z . -n . -z -Z . -Z . . -Z -z . -q . (Ticket Granting Ticket): . ksu ( GET_TGT_VIA_PASSWD ) . -l lifetime ( .) ( ) . -r time ( .) (renewable) . -p (proxiable) . -P (proxiable) . -f (forwardable) . -F (forwardable) . -e command [args ...] ksu -e . : ksu bob -e ls -lag -e : root . ~target_user/.k5users . ~target_user/.k5users . k5users.: . (*) . : jqpublic@USC.EDU ls mail /local/kerberos/klist jqpublic/secure@USC.EDU * jqpublic/admin@USC.EDU jqpublic@USC.EDU ls mail klist . jqpublic/secure@USC.EDU . jqpublic/admin@USC.EDU . jqpublic/admin@USC.EDU ( ksu -e) jqpublic@USC.EDU . . CMD_PATH ksu . root ( *) . . -a args . -a ksu -a . -a -e : -a -c [command [arguments]] -c . (INSTALLATION INSTRUCTIONS) ksu : GET_TGT_VIA_PASSWD . (TGT) . ksu . PRINC_LOOK_AHEAD PRINC_LOOK_AHEAD ksu k5users. ( -n) . CMD_PATH ( k5users.). HAVE_GETUSERSHELL root ksu << >> (legal shell) . getusershell(3) . passwd . : KSU_OPTS = -DGET_TGT_VIA_PASSWD -DPRINC_LOOK_AHEAD -DCMD_PATH='"/bin /usr/ucb /local/bin" ksu root setuid (SUID). ksu rlogin . ( host/nii.isi.edu@ISI.EDU). keytab . (SIDE EFFECTS) ksu . KSU (AUTHOR OF KSU) () (Gennady (Ari) Medvinsky) (ENVIRONMENT) kerberos(7) . (SEE ALSO) kerberos(7), kinit(1) (AUTHOR) (MIT) (COPYRIGHT) 1985-2024, MIT krb5 KSU(1)