[1551] in athena10
Re: [Debathena] #136: Can we use pam-afs-session?
daemon@ATHENA.MIT.EDU (Debathena Trac)
Thu Mar 12 01:36:07 2009
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
From: "Debathena Trac" <debathena@MIT.EDU>
Cc: debathena@mit.edu
To: broder@mit.edu, nelhage@mit.edu, price@mit.edu
Date: Thu, 12 Mar 2009 05:35:31 -0000
Reply-To:
Message-ID: <052.4b8352f41c0ff863c97dd5c6bc424e05@mit.edu>
In-Reply-To: <043.be52c0d8d2d379770e278c4319337a9d@mit.edu>
Content-Transfer-Encoding: 8bit
#136: Can we use pam-afs-session?------------------------+---------------------------------------------------
Reporter: broder | Owner:
Type: enhancement | Status: new
Priority: minor | Resolution:
Keywords: |
------------------------+---------------------------------------------------
Comment(by broder):
It turns out that we can use this.
We need to add
{{{
auth required pam_afs_session.so
}}}
after pam_krb5.so in common-auth, and
{{{
session required pam_afs_session.so
}}}
somewhere also after pam_krb5.so in common-session.
We also need to add
{{{
[appdefaults]
aklog_homedir = true
}}}
to krb5.conf
Jury's still out on the SIGCHLD issue.
-- Ticket URL: <http://debathena.mit.edu/trac/ticket/136#comment:3>Debathena <http://debathena.mit.edu/>MIT Debian-Athena Project