[OpenAFS] pam_krb5afs under x86_64

Russ Allbery rra@stanford.edu
Thu, 01 Dec 2005 12:51:06 -0800

Dj Merrill <deej@thayer.dartmouth.edu> writes:

> 	We are running a bunch of 32 bit Centos 3.5 and 3.6 machines,
> and using pam_krb5afs.so with the "tokens" option in the PAM
> system-auth file for authentication and getting AFS tokens upon login.
> It seems to be working fine with 32 bit Intel and AMD machines,
> however, under 64 bit Centos 3.6 x86_64 (Intel ia32e machine), it works
> okay at the console, but when logging in via SSH it won't get
> the AFS tokens.  It gets the Krb5 tickets, and I can manually
> use the "afslog" or "aklog" commands to get AFS tokens.

> 	Any solutions already out there before I start delving into
> possibly hours of debug h*ll?

I went through hours of debugging hell trying to get the 64-bit OpenSSH
build on RHEL to work properly with PAM and never managed.  :/  As near as
I could tell, there was something deeply buggy about how it did PAM calls.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>