[22767] in Kerberos
Re: problem setting up ssh-krb5 from Debian Sarge
daemon@ATHENA.MIT.EDU (Wes Chow)
Thu Oct 28 15:46:47 2004
Date: Thu, 28 Oct 2004 15:43:44 -0400
From: Wes Chow <wes@woahnelly.net>
To: kerberos@mit.edu
Message-ID: <20041028194344.GK16867@bebop.senortoad.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <417D042D.7000201@paritysys.net>
Errors-To: kerberos-bounces@mit.edu
> Yeah, it looks like the user account "wchow" doesn't exist on the
> remote machine, which seems odd since you said that the telnet works.
> But the line in your output:
>
> debug1: Starting up PAM with username "wchow"
> Failed none for wchow from 192.168.0.13 port 32804 ssh2
>
> ... shows that PAM is failing this user log in.
>
> D.
>
>
> Sam Hartman wrote:
> > Your pam account stack is claiming that you are not authorized to log
> > in.
Do I have to do anything special to my PAM stack? I haven't touched
it at all.
On a possibly related note, I'm having problems getting PAM
authentication to work with console logins. I've added the line "auth
sufficient pam_krb5.so forwardable" to /etc/pam.d/common-auth and
"session optional pam_krb5.so" to /etc/pam.d/common-session. It's
complaining with the error "Authentication service cannot retrieve
authentication info." Googling on that, ironically, comes up with
my previous email about not being able to get ssh-krb5 to work.
Thanks,
Wes
--
http://www.woahnelly.net/~wes/ OpenPGP key = 0xA5CA6644
fingerprint = FDE5 21D8 9D8B 386F 128F DF52 3F52 D582 A5CA 6644
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
