[OpenAFS] Problem with pam on debian with 1.3.81 kernel 2.6.11

Thimo Neubauer thimo@macht.org
Thu, 14 Apr 2005 16:16:21 +0200


On Thu, Apr 14, 2005 at 04:08:51PM +0200, Simon Lyngshede wrote:
> On Thu, Apr 14, 2005 at 03:31:39PM +0200, Thimo Neubauer wrote:
> > ... or install "ssh-krb5" ;-) Then you can forward your
> > Kerberos-tickets either by using -K or setting
> > "GSSAPIDelegateCredentials yes" which is unfortunately undocumented
> > (see http://bugs.debian.org/144291).
> > 
> 
> Personally I can't get -K to work, but it might be due to my PAM
> configuration. Generally I haven't had much luck with any of the
> Kerberos features in ssh, but again that might very well be my
> configuration being weird.

Or the usual ssh oddities: one thing which bit me several times was
that changes in PAM only work after sshd is restarted (can't remember
if reload was sufficient). The other one is the "privilege separation"
which I switched off after having some trouble with it.

If you like we can compare configurations off-list because -K works
for me(tm) ;-)

Cheers
   Thimo