[OpenAFS] Probleme with aklog
   
    Bastian
     
    dea1306@melvex.xs4all.nl
       
    Mon, 19 Feb 2007 21:25:08 +0100
    
    
  
> On Mon, 19 Feb 2007 10:14:56 -0600
> "Douglas E. Engert" <deengert@anl.gov> wrote:
>
>   
> # Change to no to disable tunnelled clear text passwords
> #PasswordAuthentication yes
>
> # Kerberos options
> KerberosAuthentication yes
> #KerberosGetAFSToken yes
> KerberosOrLocalPasswd yes
> KerberosTicketCleanup yes
>
> # GSSAPI options
> GSSAPIAuthentication no
> #GSSAPICleanupCredentials yes
>
> X11Forwarding yes
> X11DisplayOffset 10
> PrintMotd no
> PrintLastLog yes
> TCPKeepAlive yes
> #UseLogin no
>
>   
Try GSSAPIAuthentication instead of KerberosAuthentication. GSSAPI 
stands for Kerberos 5 in this case. Maybe differences between K4 en K5 
cause the realm name problem.
I don have the Kerberos*-entries in my sshd_conf, and pam_krb5 & 
pam_openafs-session work fine (Debian Sarge and Debian Etch)
Bastian