[22212] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Can't get ssh over k5/afs working well

daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Aug 17 12:29:22 2004

To: Sensei <noone@nowhere.org>
From: Sam Hartman <hartmans@mit.edu>
Date: Tue, 17 Aug 2004 12:25:10 -0400
In-Reply-To: <2o3td3F64groU1@uni-berlin.de> (noone@nowhere.org's message of
 "Fri, 13 Aug 2004 15:18:27 +0200")
Message-ID: <tslsmalohp5.fsf@cz.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

In debian, using the ssh-krb5 package with a pam config like:

auth [success=ok default=1] pam_krb5.so forwardable
auth [default=1] pam_permit.so
auth       required     pam_unix.so try_first_pass
auth [default=ignore] pam_openafs_session.so


should mostly do what you want.

Note that the ssh gssapi support between 3.4/3.6 and 3.8 is
incompatible.

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post