[OpenAFS] Getting tokens for non-interactive services
Frank Burkhardt
fbo2@gmx.net
Tue, 4 Mar 2003 10:46:46 +0100
On Sat, Mar 01, 2003 at 11:13:53PM -0600, Charles Clancy wrote:
> On Sat, 1 Mar 2003, Frank Burkhardt wrote:
>
> > On Wed, Feb 26, 2003 at 02:01:49PM -0600, Charles Clancy wrote:
> >
> > > Try removing the set_token from pam_openafs_session. Perhaps your krb5
> > > module isn't creating the krb5 credential cache until setcred, and since
> > > samba properly supports setcred, it should be fine.
> >
> > Samba won't grant afs-authenticated access neither with nor without
> > set_token.
>
> Can you turn up the Samba debug level (and the PAM debug level) to get
> some relevent logs?
How can I increase the pam debug level? The only debug-option I found was
to add "debug" to any line of /etc/pam.d/samba . This doesn't show
anything usefull. Is there a chance to switch the whole pam-stack into
debug-mode?
> > SSHD successfully gets a token (as long as I don't use PK-Auth :-( ).
>
> Compile in token passing. :-( --> :-)
I'll do so.
Regards,
Frank Burkhardt