[OpenAFS-devel] How to get tokens with pam

chechu chechu chechuironman@hotmail.com
Mon, 28 Aug 2006 17:48:21 +0200


Hi¡

I buil a pdc with openldap+kerberos and I wanna add openafs. But when I
log like a user by ssh for examplo I get this user log in and make
"kinit" but it dont make aklog, and I think the problem its with some
module of pam...this is my /etc/pam.d/ssh  (i use debian):


auth            required        pam_nologin.so
auth            required        pam_env.so
auth            sufficient      pam_krb5.so forwardable
auth            required        pam_unix.so try_first_pass shadow
auth            required        pam_issue.so issue=/etc/issue.net

account         sufficient      pam_krb5.so forwardable
account         required        pam_unix.so try_first_pass shadow

password        required        pam_krb5.so forwardable

session         sufficient      pam_krb5.so forwardable
session         optional        pam_openafs_session.so
session         required        pam_unix.so
session         optional        pam_lastlog.so
session         optional        pam_motd.so

thanks