What is the best way to enact password aging with kerberos in the mix?

Thu May 16 16:56:00 EDT 2002

On Thu, May 16, 2002 at 03:31:23PM -0500, Austin Gonyou wrote:
> Via PAM? or Kerberos. If via kerberos, what is the best setup to test
> this in. (pointers/references please)

If you're lucky, you can do your password aging on the KDC and any PAM
modules you use will honor it correctly.  The pam_krb5 module from
sourceforge.net aspires to do this.

Steve Langasek
postmodern programmer