Tickets accepted upon login but still prompted for password

[Booker C. Bense]

On 15 Mar 2002, Donn Cave wrote:

> Quoth bbense at networking.stanford.edu ("Booker C. Bense"):
> | On Fri, 15 Mar 2002, Rechenberg, Andrew wrote:
> |
> | > OK, I put a .k5login file in $HOME and it works, but I don't
> | > want to have to do this for 500+ users.  :(  Any other suggestions?
> | >
> |
> | - You'll need to patch the src code. Look in
> |
> | http://www.stanford.edu/~bbense/stanford_krb_patches/version1.2.2/lib/krb5/os/kuserok.c
> |
> | - I'm not sure it's the best way to do it, but that's what
> | we do here.
>
> Best way to do what?  I see that your patch makes .k5login policy
> depend on existence of another file, if absent then .k5login is
> required.  And the comments explain why.  But how would that help
> in the present case?  I must have missed something about the setup
> there - it looked to me like he would want the normal default
> behavior from krb5_kuserok(), and I don't see why he would need
> .k5login.
>

- Sorry, I forgot that the default was to let you in if
.k5login was missing.

- Booker C. Bense