[33592] in Kerberos

home help back first fref pref prev next nref lref last post

Re: pam_krb5 for AIX

daemon@ATHENA.MIT.EDU (Russ Allbery)
Fri Jul 15 16:55:30 2011

From: Russ Allbery <rra@stanford.edu>
To: Sonja Benz <sonja.benz@de.ibm.com>
In-Reply-To: <OF5A808C26.4014A21C-ONC12578CE.00726F8B-C12578CE.007291FF@de.ibm.com>
	(Sonja Benz's message of "Fri, 15 Jul 2011 22:51:24 +0200")
Date: Fri, 15 Jul 2011 13:54:07 -0700
Message-ID: <874o2nz2mo.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Sonja Benz <sonja.benz@de.ibm.com> writes:

> Pure authentication is what I need, ticket cache is not needed.

It should already do what you want, then.  If your application calls
pam_setcred (despite not needing a ticket cache), which happens some
times, you can set no_ccache as a PAM option, and that will force
pam_setcred to be silently successful.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post