[OpenAFS] debian-gssapi works, partly...

[Russ Allbery]

Lars Schimmer <l.schimmer@cgv.tugraz.at> writes:

> No, thats not the case in "etch".  In Etch there is now the
> openssh-client and openssh-server packages which are gssapi-enabled.

There's also a transition package for upgrades of the old ssh-krb5
package.

> But with latest openssh on etch I=B4ve got the problem that I don=B4t obt=
ain
> a token while logging in via SSH from putty or a PC without gssapi.
> While logging in via gdm local to kdm obtains a token and logging in
> with ticket forwarding obtains me a token.

> I tried to builtin pam debug, but yet no luck with that...

The AFS PAM module in etch leaves a bit to be desired, although it should
work.  I'm not sure how good the debugging support is, though.  There will
be a better AFS PAM module in lenny.

--=20
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>