[OpenAFS] pam when server is down (again)

Charles Clancy security@xauth.net
Fri, 8 Nov 2002 12:45:47 -0600 (CST)


> On Fri, 2002-11-08 at 19:18, Charles Clancy wrote:
> > account?  I think the following would be better:
> >   login	auth       sufficient pam_unix.so
> >   login	auth       required pam_afs.so debug try_first_pass
>
> what about
>   login	auth       optional pam_afs.so debug try_first_pass
>   login	auth       required pam_unix.so

That's fine, except that if AFS is down you stall while pam_afs.so tries
to talk to the servers.  It should let you log in eventually, though I've
not tried it.

[ t charles clancy ]--[ tclancy@uiuc.edu ]--[ www.uiuc.edu/~tclancy ]