[29481] in Kerberos

home help back first fref pref prev next nref lref last post

Re: More fun with Russ' pam_krb5

daemon@ATHENA.MIT.EDU (Coy Hile)
Wed Mar 12 21:15:56 2008

Date: Wed, 12 Mar 2008 21:15:18 -0400 (EDT)
From: Coy Hile <coy.hile@coyhile.com>
To: "Douglas E. Engert" <deengert@anl.gov>
In-Reply-To: <47D7DC24.2020100@anl.gov>
Message-ID: <Pine.GSO.4.61.0803122113460.3985@supergrover.coyhile.com>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Wed, 12 Mar 2008, Douglas E. Engert wrote:

> As such, I only use session based caches from SSH, and leave the console 
> logins
> to do their own thing and use the default. The problem you are seeing might 
> be
> that the KRB5CCNAME is not being set in dtlogin and/or not being passed to 
> xscreensaver.
>
>

I think that's exactly it. I switched back to using the default caches
for dtlogin, and all is functional now.  (For Russ' pam_krb5,  I forced a ccache of /tmp/krb5cc_%u.)

Now to see whether the password expiry changing stuff works.  I recall 
running into that stuff before.

-- 
Coy Hile
coy.hile@coyhile.com
"Unarmed combat is what we enter into when we have been foolish enough
not to have a weapon; careless enough to lose our weapon, or unlucky
enough to have broken our weapon"
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post