[OpenAFS] OpenAFS Client login via KDM

[Ralf Hornik Mailings]

This is a cryptographically signed message in MIME format.

--------------ms000908090205060604040805
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi list,

Thank you all for the lot of hints. So I only have to suppress the
message regarding $HOME/.dmrc for GDM which is being ignored because of
the wrong permissions (must be owned by user and not group writable)

But one additional small issue could be adressed here (might be related)
When I login sucessfully I get still the message:

"id: cannot find name for group ID 1095071042"

where ID is changing at every login, or switch users. The message is
triggered by groups:

ralf@erde:~$ groups
users id: cannot find name for group ID 1095071041
1095071041
ralf@erde:~$ id
uid=10003(ralf) gid=100(users) groups=100(users),1095071041
ralf@erde:~$

So what groupinformation is missing here? It doesn't matter, wether user
ralf is a local user or ldap.

Thank you and best regards

Ralf


Stephen Joyce wrote:
> On Fri, 30 May 2008, Ralf Hornik Mailings wrote:
>
>> KDM, WDM they all have the same problem. After successfully login, the
>> desktop manager is resetted (back to login prompt). With, or without
>> permission denied"
>
> I am using KDM with AFS on Debian Etch successfully. We took the low
> road and used pam_afs.so from libpam-openafs-kaserver. I know (at least
> some of) the problems with this, but it still "just works" for me (using
> fakeka). Looking at this again was on my to-do list, but it's lower
> priority than the things that don't "just work".
>
> FWIW, I tried something similar to the reported pam setup, using
> pam_krb5, a few months back and ran into similar problems; I thought it
> was something I was doing wrong, but am glad to see it's not just me.
>
> Anyway, hopefully this report will help someone figure out where the
> problem lies and report back.
>
> Cheers, Stephen



--------------ms000908090205060604040805
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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==
--------------ms000908090205060604040805--