[30571] in Kerberos

home help back first fref pref prev next nref lref last post

Re: disabling krb524d attempts - causes login hangs

daemon@ATHENA.MIT.EDU (Nalin Dahyabhai)
Fri Dec 19 15:10:21 2008

Date: Fri, 19 Dec 2008 15:07:45 -0500
From: Nalin Dahyabhai <nalin@redhat.com>
To: Fletcher Cocquyt <fcocquyt@stanford.edu>
Message-ID: <20081219200745.GA5135@redhat.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <loom.20081219T170629-685@post.gmane.org>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Fri, Dec 19, 2008 at 05:16:13PM +0000, Fletcher Cocquyt wrote:
> So in /etc/pam.d/system-auth-ac (the same place I added debug for logging krb
> 
> and the only pam.d with krb config) I set: 
> 
> krb4_convert=false krb4_convert_524=false

That should work in the 'pam' portion of the [appdefaults] section
in krb5.conf.  If you're passing it in as an argument, try
"no_krb4_convert" and "no_krb4_convert_524" instead.

HTH,

Nalin
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post