Kerberos Miscellaneous

• Users that live in Open Directory, have kerberos principals

  • Users local to a machine, of course, do not

• Any user that lives in Open Directory and is marked “User can administer this directory domain” can make changes to the Kerberos database, as can anything with an “admin” instance

  • ## This file autogenerated by KDCSetup ##
  • */admin@IREALM.AWESMOE.ORG *
  • alice *