* Rasputin <rasputin@idoru.mine.nu> [0820 14:20]:

Bad form to reply to my own post I know, but after much 
printf() butchery to ktuserok.c, I see where I am going wrong.

Added a user/root@REALM and can now su .

Sorry for noise...
 
> AmI missing something obvious here?
> 
> I setup Kerberos a la the NetBSD doc, the princial is
> 
> user@REALM
> 
> I can ssh direct to other hosts in the realm as that principal and
> everything works fine, but a local su keeps giving me:
> 
> /usr/bin/su su: kerberos5: not in root's ACL.
> Password:
> 
> eve nthough /root/.k5login contains
> 
> 
> user@REALM
> 
> is there soemthing else I need to enable ? Thanks!
> 
> 
> -- 
> Another good night not to sleep in a eucalyptus tree.
> Rasputin :: Jack of All Trades - Master of Nuns

-- 
Have you reconsidered a computer career?
Rasputin :: Jack of All Trades - Master of Nuns