[30571] in Kerberos
Re: disabling krb524d attempts - causes login hangs
daemon@ATHENA.MIT.EDU (Nalin Dahyabhai)
Fri Dec 19 15:10:21 2008
Date: Fri, 19 Dec 2008 15:07:45 -0500
From: Nalin Dahyabhai <nalin@redhat.com>
To: Fletcher Cocquyt <fcocquyt@stanford.edu>
Message-ID: <20081219200745.GA5135@redhat.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <loom.20081219T170629-685@post.gmane.org>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, Dec 19, 2008 at 05:16:13PM +0000, Fletcher Cocquyt wrote:
> So in /etc/pam.d/system-auth-ac (the same place I added debug for logging krb
>
> and the only pam.d with krb config) I set:
>
> krb4_convert=false krb4_convert_524=false
That should work in the 'pam' portion of the [appdefaults] section
in krb5.conf. If you're passing it in as an argument, try
"no_krb4_convert" and "no_krb4_convert_524" instead.
HTH,
Nalin
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos