OpenSSH with w2k kerberos (login problems)

Steve Langasek vorlon at dodds.net
Wed Jan 15 14:24:35 EST 2003


On Wed, Jan 15, 2003 at 06:39:19PM +0100, Marc wrote:
> Sam Hartman wrote:
> > You want to look at the libpam-krb5 package in addition to ssh-krb5.
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/kerberos

> I just installed libpam-krb5 on my Debian box but now what do I need to 
> add to my /etc/pam.d/ssh file ?

See below the pam.d config we use for comparison.

Regards,
-- 
Steve Langasek
postmodern programmer

#%PAM-1.0
auth       required     pam_nologin.so
auth       required     pam_env.so # [1]
auth       sufficient   pam_krb5.so
auth       required     pam_unix.so nodelay use_first_pass

account  sufficient     pam_unix.so
account  required       pam_krb5.so

session    required     pam_unix.so
session    optional     pam_lastlog.so # [1]
session    optional     pam_motd.so # [1]
session    optional     pam_mail.so standard noenv # [1]
session    required     pam_limits.so

password   required     pam_unix.so



More information about the Kerberos mailing list