ftpd and AFS tickets
Simon Wilkinson
sxw at dcs.ed.ac.uk
Tue Apr 23 14:52:53 EDT 2002
Ken Hornstein (kenh at cmf.nrl.navy.mil) wrote:
: But if you're doing GSSAPI, then pam is never being invoked, right?
No, if PAM support is enabled then the account and session portions of the
ssh PAM stack will be invoked, even for a GSSAPI login. This enables things
like the gaining of additional credentials after login, access control, and
logging.
Cheers,
Simon.
More information about the Kerberos
mailing list