[33613] in Kerberos
Re: Login with Kerberos auth
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Fri Jul 22 09:26:45 2011
Message-ID: <4E297A97.8050106@kickflop.net>
Date: Fri, 22 Jul 2011 09:26:47 -0400
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: jm130794 <jm130794@gmail.com>
In-Reply-To: <CADPUaKzOa_Hj28Gm=XVb2LYk55wejbEAcvM642Jv_B7mDsmyRg@mail.gmail.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 7/22/2011 5:13 AM, jm130794 wrote:
> Hello,
>
> I tried to use pam_krb5 module without success. With debug option on
> pam_unix and pam_krb5 module, I get that in auth.log :
>
> Jul 22 11:04:14 krbclient login[3517]: pam_krb5(login:auth):
> pam_sm_authenticate: entry (0x0)
> Jul 22 11:04:14 krbclient login[3517]: pam_krb5(login:auth): (user
> testuser) attempting authentication as testuser@EXAMPLE.COM
> <mailto:testuser@EXAMPLE.COM>
> Jul 22 11:04:16 krbclient login[3517]: pam_krb5(login:auth): user
> testuser authenticated as testuser@EXAMPLE.COM <mailto:testuser@EXAMPLE.COM>
> Jul 22 11:04:16 krbclient login[3517]: pam_krb5(login:auth):
> pam_sm_authenticate: exit (success)
> Jul 22 11:04:16 krbclient login[3517]: pam_unix(login:account): could
> not identify user (from getpwnam(testuser))
> Jul 22 11:04:16 krbclient login[3517]: Authentication failure
It means pam_unix could not look up your user account
information (via NSS; in your case supposedly LDAP).
Check that the output of 'getent passwd testuser' is
correct. getent will use the NSS sources as specified
in /etc/nsswitch.conf for the 'passwd' data source.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
