[OpenAFS] Problem with pam on debian with 1.3.81 kernel 2.6.11

Russ Allbery rra@stanford.edu
Thu, 14 Apr 2005 08:49:45 -0700


Simon Lyngshede <simon-sunsite@s-et.aau.dk> writes:
> On Thu, Apr 14, 2005 at 03:31:39PM +0200, Thimo Neubauer wrote:

>> ... or install "ssh-krb5" ;-) Then you can forward your
>> Kerberos-tickets either by using -K or setting
>> "GSSAPIDelegateCredentials yes" which is unfortunately undocumented
>> (see http://bugs.debian.org/144291).

> Personally I can't get -K to work, but it might be due to my PAM
> configuration. Generally I haven't had much luck with any of the
> Kerberos features in ssh, but again that might very well be my
> configuration being weird.

You have to turn off privilege separation right now to get it to work
properly, as near as I can tell.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>