From owner-freebsd-questions  Mon Nov 17 04:11:45 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id EAA06416
          for questions-outgoing; Mon, 17 Nov 1997 04:11:45 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from d2si.com (macbeth.d2si.com [206.8.31.2])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id EAA06398
          for <freebsd-questions@FreeBSD.ORG>; Mon, 17 Nov 1997 04:11:37 -0800 (PST)
          (envelope-from alec@d2si.com)
Received: (from alec@localhost)
	by d2si.com (8.8.5/8.8.5) id GAA13013;
	Mon, 17 Nov 1997 06:11:23 -0600 (CST)
From: Alec Kloss <alec@d2si.com>
Message-Id: <199711171211.GAA13013@d2si.com>
Subject: Re: kerberos
In-Reply-To: <9711171010.AA23778@epcot.spdc.ti.com.spdc.ti.com> from George Vagner at "Nov 17, 97 04:10:20 am"
To: vagner@spdc.ti.com (George Vagner)
Date: Mon, 17 Nov 1997 06:11:23 -0600 (CST)
Cc: freebsd-questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

George Vagner said:

> I get message when su'ing to root.
> 
> user not in roots ACL?  or something like that.

The message is actually:
        su: kerberos: not in root's ACL

> what is this.?

More or less it means you haven't quite set up Kerberos correctly.
You can probably get rid of it by adding a line like

        username.root@REALM

to /root/.klogin.  As I recall, the handbook covers this.  

> -- 
> 
> 
> Laszlo G. Vagner
> Texas Instruments
> 13570 N. Central expressway M/S 3703
> Dallas, Texas 75243
> (972)995-4297
> (972)598-5217 Pager
> Email vagner@tee eye dot com  <SPAM purposes
> http://web2.airmail.net/kf7nn
> 
> 
>