[OpenAFS] Sunray PAM on solaris9 not working

[Peter Schmid]

Dear Charles,

Charles Clancy writes:
 > Maybe dtlogin isn't calling setcred?  Try putting adding option
 > "set_token" to your pam_afs.so line in pam.conf.

It works now! My pam.conf looks like this:

#...
# pam_sunray.so added to dtlogin-SunRay by SunRay Server Software
dtlogin-SunRay auth sufficient /opt/SUNWut/lib/pam_sunray.so
dtlogin-SunRay auth sufficient /usr/lib/security/pam_afs.so set_token ignore_roo
t
dtlogin-SunRay auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
 
# pam_sunray.so added to dtsession-SunRay by SunRay Server Software
dtsession-SunRay auth sufficient /opt/SUNWut/lib/pam_sunray.so syncondisplay
dtsession-SunRay auth sufficient /usr/lib/security/pam_afs.so set_token ignore_r
oot
dtsession-SunRay auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pa
ss
#...


Regards
Peter