[OpenAFS] AFS / PAM / SSH

EC wingman@waika9.com
Fri, 10 Dec 2004 21:08:53 +0100


>Hi *,
>
>with the help of the AFS-Documentation I got pam-authentication for login
>to
>work.
>(Adding pam_afs.krb.so to /etc/pam.d/login)
>It's really nice. I can login to any client in the cell with the users from
>the ptserver.
>I even get a valid token for the user.
>
>After this quick success I tried to login via ssh and realized, that the
>ssh-process  freezes. After some trying I discovered that the flag
>"UsePrivilegeSeparation" (or something likely) was the reason for the
>freeze. After I set it to 'no' I was able to login to any afs-system via
>ssh.
>But then a new problem rises. Now I don't get a token when I log in via
>ssh?! I wasn't able to figure out why by now.
>Maybee anyone of you may help my with this.
>
>Has anyone a good documentation of the pam_afs-Module? It seems to me, as
>if
>the parameters one can set for the module aren't making a difference?
[EC] Maybe you should try to compile SSH with PAM support.

EC.