[OpenAFS] Probleme with aklog

El Barto elbarto@epitech.net
Tue, 20 Feb 2007 10:32:44 +0100


On Mon, 19 Feb 2007 21:25:08 +0100
Bastian <dea1306@melvex.xs4all.nl> wrote:

> 
> > On Mon, 19 Feb 2007 10:14:56 -0600
> > "Douglas E. Engert" <deengert@anl.gov> wrote:
> >
> >   
> > # Change to no to disable tunnelled clear text passwords
> > #PasswordAuthentication yes
> >
> > # Kerberos options
> > KerberosAuthentication yes
> > #KerberosGetAFSToken yes
> > KerberosOrLocalPasswd yes
> > KerberosTicketCleanup yes
> >
> > # GSSAPI options
> > GSSAPIAuthentication no
> > #GSSAPICleanupCredentials yes
> >
> > X11Forwarding yes
> > X11DisplayOffset 10
> > PrintMotd no
> > PrintLastLog yes
> > TCPKeepAlive yes
> > #UseLogin no
> >
> >   
> 
> Try GSSAPIAuthentication instead of KerberosAuthentication. GSSAPI 
> stands for Kerberos 5 in this case. Maybe differences between K4 en K5 
> cause the realm name problem.
> 
> I don have the Kerberos*-entries in my sshd_conf, and pam_krb5 & 
> pam_openafs-session work fine (Debian Sarge and Debian Etch)
> 
> 
> Bastian
> 

 The thing is that does the same on a physical login.
 Can you paste your pam configuration for your Debian Etch please ?

-- 
Emmanuel Vadot          System & Network Administrator [root & bocal]
elbarto@epitech.net     14-16 rue Voltaire 94270 Le Kremlin-Bicetre
01 44 08 01 91          06 83 14 62 92