OpenSSH with w2k kerberos (login problems)
Steve Langasek
vorlon at dodds.net
Wed Jan 15 14:24:35 EST 2003
On Wed, Jan 15, 2003 at 06:39:19PM +0100, Marc wrote:
> Sam Hartman wrote:
> > You want to look at the libpam-krb5 package in addition to ssh-krb5.
> > ________________________________________________
> > Kerberos mailing list Kerberos at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/kerberos
> I just installed libpam-krb5 on my Debian box but now what do I need to
> add to my /etc/pam.d/ssh file ?
See below the pam.d config we use for comparison.
Regards,
--
Steve Langasek
postmodern programmer
#%PAM-1.0
auth required pam_nologin.so
auth required pam_env.so # [1]
auth sufficient pam_krb5.so
auth required pam_unix.so nodelay use_first_pass
account sufficient pam_unix.so
account required pam_krb5.so
session required pam_unix.so
session optional pam_lastlog.so # [1]
session optional pam_motd.so # [1]
session optional pam_mail.so standard noenv # [1]
session required pam_limits.so
password required pam_unix.so
More information about the Kerberos
mailing list