[OpenAFS-port-darwin] obtaining AFS tokens for SSH logins
David Botsch
dwb7@ccmr.cornell.edu
Thu, 22 Apr 2004 21:13:21 -0400
Well... check the obvious, first (note, I haven't tried this yet on Panther).
What's your pam config file for sshd look like?
And, is there anything useful in the system log?
On Fri, Apr 23, 2004 at 11:44:37AM +1200, Keith Johnston wrote:
> Hi
> I am trying to get afs tokens for users who ssh into an OS X box
> running OS X10.3.3. I can obtain afs tokens and kerberos tickets
> logging into the box normally at login but not when I ssh into the same
> box.
> I found Bil Hays' web page http://www.ibiblio.org/macsupport/sshd/
> for using PAM and downloaded the 10.3 version of pam_afs.so.1 and
> followed the advice on that page, however although I can connect the
> connection time is several seconds longer than without the PAM and I do
> not get any afs tokens at login. I can obtain tokens with kinit and my
> password.
> I have had a bit of a play with sshd_config settings and achieved
> nothing useful having tried enabling various options. We are only using
> ssh2 and kerberos 5 here.
> Is there some trick I am missing, if so could someone enlighten me or
> point me to the right place to get the answers I need.
> Thanks in advance
> Keith
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Keith Johnston xtn: 87977
> Computer Support
> Computer Science Department Rm 395
>
> This email is brought to you by the letters OS X and the number 10
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
> _______________________________________________
> port-darwin mailing list
> port-darwin@openafs.org
> https://lists.openafs.org/mailman/listinfo/port-darwin
--
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************