[37120] in Kerberos

home help back first fref pref prev next nref lref last post

Re: help with persistent ccache

daemon@ATHENA.MIT.EDU (Brandon Allbery)
Wed Jun 24 16:22:13 2015

From: Brandon Allbery <ballbery@sinenomine.net>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Wed, 24 Jun 2015 20:21:45 +0000
Message-ID: <1435177304.62804.1.camel@vikktakkht>
In-Reply-To: <CAAd7aub2Fgv3_cfVh193ueXyH6jL8JKHF3_sM2=XOjgKFKHgyA@mail.gmail.com>
Content-Language: en-US
Content-ID: <94F4A0E2FC46C54FAE9DB1FECC12B0E4@mex05.mlsrvr.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Wed, 2015-06-24 at 15:10 -0500, Ben H wrote:
> Why is not cached initialized on interactive login and an additional
> manual
> kinit is required?

This may have nothing to do with keyring ccache, but only with a
misconfigured PAM stack that is not creating a ccache with the ticket
from login.

Alternately it could mean that login is running the session PAM stack in
the wrong context, so the wrong keyring is created. I would check the
first part before trying to diagnose the second, though.

-- 
brandon s allbery kf8nh                           sine nomine associates
allbery.b@gmail.com                              ballbery@sinenomine.net
unix openafs kerberos infrastructure xmonad        http://sinenomine.net

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post