FreeBSD pam_krb5 not getting a ticket at login

Someone please at nospam.net
Mon Apr 8 07:45:35 EDT 2002


Jose Marques wrote:

> On Thu, 4 Apr 2002, Someone wrote:
> 
> 
>>I am using FreeBSD with pam_krb5 for login and SSH, the problem is that
>>when I login from the console or via SSH and type k5list I see that I
>>have not received any ticket, so I need to manually use k5init to get one.
>>
> 
> On FreeBSD you need to list the pam_krb5 first, eg.
> 
> login   auth    sufficient      pam_krb5.so
> login   auth    sufficient      pam_skey.so use_first_pass
> login   auth    requisite       pam_cleartext_pass_ok.so use_first_pass
> login   auth    sufficient      pam_unix.so
> 
> Then it should work.  One problem I've found with xdm is that if the KDC
> is not available then xdm locks up the keyboard.
> 
> 

I commented out my entries in pam.conf for the login service and copy 
and pasted your entries, unfortunately it still doesn't work, I don't 
get any tickets and on the console I can see the following error message:

login: no modules loaded for `login' service
login: pam_open_session: Permission denied

I didn't have these error messages before copying your PAM config.

Do you have any clues ??

Regards




More information about the Kerberos mailing list