[OpenAFS] PAM problem with 1.4.4 and Linux

[Simon Wilkinson]

On 25 Jan 2008, at 16:36, Jeff Blaine wrote:

> ChallengeResponseAuthentication is set to no
>
> Any other ideas?

What's in your session stack - do you have a call to pam_keyinit.so?

If you're using keyring based PAGs, then pam_keyinit will remove the  
key created by AFS to hold your PAG when it initialises your keyring.  
You need to remove pam_keyinit (which may impact on your ability to  
use other keyring based services), or use a PAM module which calls  
setpag() from the session stack.

Cheers,

Simon.