[OpenAFS] Off-topic, anyone tried this?
Derek T. Yarnell
derek@cs.umd.edu
Tue, 21 May 2002 18:23:03 -0400
On Tue, May 21, 2002 at 02:51:16PM -0700, Michael Lasevich wrote:
> I actually found, downloaded, and compiled pam_openafs_session (god bless
> Google!), but something is wrong with it or my setup (i am getting a bad
> parameter from aklog during login). But it gives me an awesome framework to
> hack from!!! Thank you.
Make sure that you have changed the path in the pam_openafs_session.c to the
correct one for aklog.
Also see my previous mail about the ordering.
> As for krb5afs, this is the default module RH's authconfig put into PAM. It
> does not work for me. There are no errors what so ever and it gets the
> krbtgt/REALM@REALM K5 ticket. It does NOT get afs/cell@REALM K5 ticket or
> AFS token. If I run aklog I get those without an issue. There is nothing in
> the /var/log/messages about krb55afs except for
>
> May 21 14:44:18 afsclient sshd[22094]: pam_krb5afs: authentication succeeds
> for `michael'
>
> (afsclient is the name of the unix client machine and michael is the user
> account)
>
> I added the word "debug" after every instance of krb5afs module in the
> pam.d/system-auth file, but it did not change anything.
>
> -Michael
>
--
---
Derek T. Yarnell
University of Maryland
Computer Science Department Unix Staff
derek@cs.umd.edu