[OpenAFS] PAM problem with 1.4.4 and Linux
Simon Wilkinson
sxw@inf.ed.ac.uk
Fri, 25 Jan 2008 16:43:00 +0000
On 25 Jan 2008, at 16:36, Jeff Blaine wrote:
> ChallengeResponseAuthentication is set to no
>
> Any other ideas?
What's in your session stack - do you have a call to pam_keyinit.so?
If you're using keyring based PAGs, then pam_keyinit will remove the
key created by AFS to hold your PAG when it initialises your keyring.
You need to remove pam_keyinit (which may impact on your ability to
use other keyring based services), or use a PAM module which calls
setpag() from the session stack.
Cheers,
Simon.