[OpenAFS] Getting tokens for non-interactive services

[Frank Burkhardt]

On Sat, Mar 01, 2003 at 11:13:53PM -0600, Charles Clancy wrote:
> On Sat, 1 Mar 2003, Frank Burkhardt wrote:
> 
> > On Wed, Feb 26, 2003 at 02:01:49PM -0600, Charles Clancy wrote:
> >
> > > Try removing the set_token from pam_openafs_session.  Perhaps your krb5
> > > module isn't creating the krb5 credential cache until setcred, and since
> > > samba properly supports setcred, it should be fine.
> >
> > Samba won't grant afs-authenticated access neither with nor without
> > set_token.
> 
> Can you turn up the Samba debug level (and the PAM debug level) to get
> some relevent logs?
How can I increase the pam debug level? The only debug-option I found was
to add "debug" to any line of /etc/pam.d/samba . This doesn't show
anything usefull. Is there a chance to switch the whole pam-stack into
debug-mode?

> > SSHD successfully gets a token (as long as I don't use PK-Auth :-( ).
> 
> Compile in token passing.  :-(  -->  :-)
I'll do so.

Regards,

Frank Burkhardt