[OpenAFS] Probleme with aklog

Bastian dea1306@melvex.xs4all.nl
Mon, 19 Feb 2007 21:25:08 +0100


> On Mon, 19 Feb 2007 10:14:56 -0600
> "Douglas E. Engert" <deengert@anl.gov> wrote:
>
>   
> # Change to no to disable tunnelled clear text passwords
> #PasswordAuthentication yes
>
> # Kerberos options
> KerberosAuthentication yes
> #KerberosGetAFSToken yes
> KerberosOrLocalPasswd yes
> KerberosTicketCleanup yes
>
> # GSSAPI options
> GSSAPIAuthentication no
> #GSSAPICleanupCredentials yes
>
> X11Forwarding yes
> X11DisplayOffset 10
> PrintMotd no
> PrintLastLog yes
> TCPKeepAlive yes
> #UseLogin no
>
>   

Try GSSAPIAuthentication instead of KerberosAuthentication. GSSAPI 
stands for Kerberos 5 in this case. Maybe differences between K4 en K5 
cause the realm name problem.

I don have the Kerberos*-entries in my sshd_conf, and pam_krb5 & 
pam_openafs-session work fine (Debian Sarge and Debian Etch)


Bastian