[OpenAFS] pam_krb5afs under x86_64 - a "fix"

Dj Merrill deej@thayer.dartmouth.edu
Thu, 15 Dec 2005 16:11:14 -0500


Dj Merrill wrote:

> 	We are running a bunch of 32 bit Centos 3.5 and 3.6 machines,
> and using pam_krb5afs.so with the "tokens" option in the PAM
> system-auth file for authentication and getting AFS tokens upon login.
> It seems to be working fine with 32 bit Intel and AMD machines,
> however, under 64 bit Centos 3.6 x86_64 (Intel ia32e machine), it works
> okay at the console, but when logging in via SSH it won't get
> the AFS tokens.  It gets the Krb5 tickets, and I can manually
> use the "afslog" or "aklog" commands to get AFS tokens.

	Just in case someone else runs across this, here is how
I "fixed" it.

	Remove the 64 bit packages:
	rpm -ev openssh openssh-askpass-gnome openssh-server openssh-clients
openssh-askpass

	Download the 32 bit packages for the same release version
(in this case Centos 3.6), and install them with RPM.

	Restart sshd.

	It now works fine.  Something is messed up with the
64 bit versions of openssh, apparently.  The downside is that
I now have to treat openssh as a "special" package that can't be
updated via the normal mechanism, since it will install the
64 bit version.

fyi

-Dj