[OpenAFS] Getting tokens for non-interactive services

Frank Burkhardt fbo2@gmx.net
Sat, 1 Mar 2003 10:28:48 +0100


On Wed, Feb 26, 2003 at 02:01:49PM -0600, Charles Clancy wrote:
> On Wed, 26 Feb 2003, Frank Burkhardt wrote:
> 
> > Thank you for this link. It was very helpful but not for the
> > problem I mentioned above.
> >
> > Win98 was able to connect to the linux-gateway, but samba doesn't
> > make a token.
> >
> > Maybe my pam-configuration is broken...
> 
> Try removing the set_token from pam_openafs_session.  Perhaps your krb5
> module isn't creating the krb5 credential cache until setcred, and since
> samba properly supports setcred, it should be fine.
Samba wonÄt grant afs-authenticated access neither with nor without set_token.

> Does your configuration work for things like sshd or telnetd?
Yes.

SSHD successfully gets a token (as long as I don't use PK-Auth :-( ).