[29454] in Kerberos
Re: More fun with Russ' pam_krb5
daemon@ATHENA.MIT.EDU (Coy Hile)
Tue Mar 11 21:27:32 2008
Date: Tue, 11 Mar 2008 21:24:01 -0400 (EDT)
From: Coy Hile <coy.hile@coyhile.com>
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <87iqzskbvl.fsf@windlord.stanford.edu>
Message-ID: <Pine.GSO.4.61.0803112120340.1316@supergrover.coyhile.com>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, 11 Mar 2008, Russ Allbery wrote:
>
> If you track down why KRB5CCNAME isn't being set properly to point to your
> current ticket cache before spawning xscreensaver, that will fix the rest
> of the problem, I think.
>
>
Ok, that's strange. I just logged back out of my desktop session and back
in, and I get the following:
[21:18:20]ganymede:~ % echo $KRB5CCNAME
/tmp/krb5cc_1000_tOaidT
[21:18:27]ganymede:~ %
which jives with what's in syslog:
Mar 11 21:18:10 ganymede dtlogin[23065]: [ID 584047 user.debug] (pam_krb5): hile: <unknown>: entry (0x1)
Mar 11 21:18:10 ganymede dtlogin[23065]: [ID 584047 user.debug] (pam_krb5): hile: initializing ticket cache /tmp/krb5cc_1000_tOaidT
Mar 11 21:18:10 ganymede dtlogin[23065]: [ID 584047 user.debug] (pam_krb5): hile: <unknown>: exit (success)
After locking and unlocking the screen, I see the same behaviour again:
[21:20:44]ganymede:~ % klist
klist: No credentials cache file found (ticket cache FILE:/tmp/krb5cc_1000_tOaidT)
[21:20:49]ganymede:~ % echo $KRB5CCNAME
/tmp/krb5cc_1000_tOaidT
[21:20:56]ganymede:~ %
and syslog shows pam_krb5 defaulting to the default ccache.
I haven't stepped through the code enough to know what else I can do to debug
this more. Any help you can give is appreciated.
--
Coy Hile
coy.hile@coyhile.com
"Unarmed combat is what we enter into when we have been foolish enough
not to have a weapon; careless enough to lose our weapon, or unlucky
enough to have broken our weapon"
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
