ftpd and AFS tickets

Simon Wilkinson sxw at dcs.ed.ac.uk
Tue Apr 23 14:52:53 EDT 2002


Ken Hornstein (kenh at cmf.nrl.navy.mil) wrote:
: But if you're doing GSSAPI, then pam is never being invoked, right?

No, if PAM support is enabled then the account and session portions of the
ssh PAM stack will be invoked, even for a GSSAPI login. This enables things
like the gaining of additional credentials after login, access control, and
logging.

Cheers,

Simon.



More information about the Kerberos mailing list