[OpenAFS] PAM problems.

Rubino Geiß kb44@rz.uni-karlsruhe.de
Wed, 7 May 2003 14:18:34 +0200


> I copied pam_afs.so.1 to /usr/lib/pam_afs.so and changed the 
> sshd section of /etc/pam.conf to this:
> 
> # OpenSSH with PAM support requires similar modules.  The 
> session one is # a bit strange, though...
> sshd   auth    sufficient      pam_afs.so   try_first_pass ignore_root
> sshd   auth    required        pam_unix.so  try_first_pass
> sshd    account required        pam_unix.so
> sshd    password required       pam_permit.so
> sshd   session sufficient      pam_afs.so try_first_pass
> sshd    session required        pam_permit.so

This is wrong use:

sshd   auth    sufficient      pam_unix.so  
sshd   auth    sufficient      pam_afs.so   try_first_pass ignore_root

Bye, ruby