[OpenAFS] OpenAFS and sudo

Yvan Masson yvan.masson@univ-savoie.fr
Fri, 30 Jan 2015 09:39:23 +0100


Le jeudi 29 janvier 2015 à 15:21 -0500, Benjamin Kaduk a écrit :
> On Tue, 27 Jan 2015, Yvan Masson wrote:
> 
> > >
> > > Is pam_afs_session present in any pam configuration files?
> > > (grep -r pam_afs_session /etc/pam.d)
> > Yes, pam_afs_session is in some pam files : common-auth, common-session
> > and common-session-noninteractive. These files are attached. Indeed, I
> > suppose something is wrong here.
> 
> I am not exactly a pam expert, but I will note that pam_afs_session is not
> present in the common-auth file on our standard systems here, so I would
> try removing or commenting that entry and seeing if anything changes.
> 
> -Ben
Thanks very much for your answers all ! Indeed, pam_afs_session should
not be in common-auth: now my tokens remain after a sudo.

Regards, Yvan