Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA13320; Fri, 15 Dec 95 21:16:11 EST Received: from cygnus.com by MIT.EDU with SMTP id AA17934; Fri, 15 Dec 95 20:04:51 EST Date: Fri, 15 Dec 95 20:04:51 EST From: MAILER-DAEMON@MIT.EDU (Mail Delivery Subsystem) Subject: Returned mail: Deferred: Connection timed out during user open with einstein.technet.sg Message-Id: <9512160104.AA17934@MIT.EDU> To: owner-kerberos@MIT.EDU ----- Transcript of session follows ----- 451 loa@sps.mot.com... reply: read error 451 loa@sps.mot.com... reply: read error 421 gardenia.saclay.cea.fr.tcp... Deferred: Connection timed out during user open with oeillet.saclay.cea.fr 421 ccit.arizona.edu.tcp... Deferred: Connection timed out during user open with skyblu.ccit.arizona.edu 421 frankg.cc.vt.edu.tcp... Deferred: Connection timed out during user open with frankg.cc.vt.edu >>> RCPT To: <<< 553 unknown or illegal user: DJMSYS@ritvax.isc.rit.edu 550 DJMSYS@ritvax.isc.rit.edu... User unknown 451 yosar@mail.utexas.edu... reply: read error 451 yosar@mail.utexas.edu... reply: read error 421 mail.csh.rit.edu.tcp... Deferred: Connection timed out during user open with mail.csh.rit.edu 421 zainet.com.tcp... Deferred: Connection timed out during user open with zainet.com 421 tzetzal.dcaa.unam.mx.tcp... Deferred: Connection timed out during user open with tzetzal.dcaa.unam.mx >>> RCPT To: <<< 451 ... open timeout on /u/dennis 421 technet.sg.tcp... Deferred: Connection timed out during user open with einstein.technet.sg ----- Unsent message follows ----- Received: from cygnus.com by MIT.EDU with SMTP id AA17749; Fri, 15 Dec 95 20:04:51 EST Received: from tweedledumb.cygnus.com (tweedledumb.cygnus.com [192.80.44.1]) by cygnus.com (8.6.12/8.6.9) with SMTP id RAA01596; Fri, 15 Dec 1995 17:04:39 -0800 Received: by tweedledumb.cygnus.com (4.1/4.7) id AA00965; Fri, 15 Dec 95 20:04:32 EST Received: (from eichin@localhost) by paycheck.cygnus.com (8.6.12/8.6.12) id TAA00308; Fri, 15 Dec 1995 19:38:07 -0500 Date: Fri, 15 Dec 1995 19:38:07 -0500 From: "Mark W. Eichin" Message-Id: <199512160038.TAA00308@paycheck.cygnus.com> To: Teh Cheng Cc: kerberos@MIT.EDU In-Reply-To: "[6367] in Kerberos" Subject: Re: deleting user instances in K4 bug? /usr/kerberos/database/admin_acl.del on the kdc. It's just another acl like the rest of the kadmin acls. It is mentioned in the documentation. As for the lists mentioned -- .klogin files, kadmin acl's, *anything* that refers to a kerberos principal for access control. After all, those are just strings, unaffected by the database change, and if you ever reuse that name, the new entity gets all the leftover access the old one did, if you haven't cleaned it up... _Mark_ Cygnus Support Cygnus Network Security http://www.cygnus.com/data/cns/ admin: del test Admin password: When you delete an entry, be sure to take it off of any access control lists as well. Be sure that you really intend to delete the Kerberos database entry for test. If you do, type y and press return: y kadm error: Insufficient access to perform requested operation so 2 questions: 1) why don't i have sufficient access 2) what access control lists is the warning message referring to?