[OpenAFS] kcheckpass annoyances

[Andreas Haupt]

On Mon, 10 Nov 2003, Christian Ospelkaus wrote:

> Hello,
>
> maybe people on this list have seen this issue before. I am running 1.2.10 on
> debian/testing. My kdc is heimdal, and I use the libpam-krb5 pam module in
> combination with libpam-openafs-session. Everything works fine; I can login
> with ssh, kdm, @ the console etc. However, I cannot get unlocking of the
> screensaver with my kerberos password working. Here is what happens:
>
> The kde kdesktop_lock program seems to call a program called kcheckpass to
> check the password. kcheckpass has its own associated pam configuration
> file, /etc/pam.d/kcheckpass:
>
> auth    sufficient      pam_krb5.so
> auth    required        pam_unix.so     shadow  nullok try_first_pass
>
> However, I cannot unlock the screen using this configuration. This does not
> change if I add account and session entries. Strangely enough, running strace
> on the kcheckpass shows that /etc/pam.d/other is also accessed...

Are you sure that kcheckpass uses /etc/pam.d/kcheckpass? For me it seems
it looks for another PAM config file. Did you try kss? Otherwise try
modifying /etc/pam.d/other and look if it helps...

Greetings

-- 
Andreas Haupt         E-Mail: ahaupt@ifh.de
 DESY Zeuthen
 Platanenallee 6
 15738 Zeuthen