[OpenAFS] AFS / PAM / SSH

Tobias Kranz TOBx@gmx.de
Mon, 6 Dec 2004 09:38:52 +0100 (MET)


Hi *,

with the help of the AFS-Documentation I got pam-authentication for login to
work.
(Adding pam_afs.krb.so to /etc/pam.d/login)
It's really nice. I can login to any client in the cell with the users from
the ptserver.
I even get a valid token for the user.

After this quick success I tried to login via ssh and realized, that the
ssh-process  freezes. After some trying I discovered that the flag
"UsePrivilegeSeparation" (or something likely) was the reason for the
freeze. After I set it to 'no' I was able to login to any afs-system via
ssh.
But then a new problem rises. Now I don't get a token when I log in via
ssh?! I wasn't able to figure out why by now.
Maybee anyone of you may help my with this.

Has anyone a good documentation of the pam_afs-Module? It seems to me, as if
the parameters one can set for the module aren't making a difference?

Thanks in advantage,

Greets

  Tobias

-- 
GMX ProMail mit bestem Virenschutz http://www.gmx.net/de/go/mail
+++ Empfehlung der Redaktion +++ Internet Professionell 10/04 +++