Kerberos-Mandrake 9.2

RBR HYXCCCIDDDL at LLKDIOUDF.EDU
Mon Feb 2 12:10:07 EST 2004


Has anyone had success using Kerberos to authenticate to a Mandrake 9.2
workstation?  I have been working on this for some time now, with no luck
whatsoever.  So far I have done the following.  I installed the following
Mandrake RPM's: krb5-workstation, pam_krb5, and libkrb5, along with the few
dependencies.  I configured system-auth and krb.conf.  I could not login via
KDM, or even at the command prompt using kerberos.  I could login with a
local account, not using kerberos, and then run kinit and get a kerberos
ticket.  I checked syslog and noticed that I get errors loading the
appropriate kerberos libraries in system-auth (see errors below).
After this I tried using RPMS from different sources with the same result.
I then decided to compile both pam_krb5 and libkrb5 from source.  Everything
compiled fine with no errors, but I still get the same errors.  I have had
no problems with kerberos on other distributions.  Any ideas as to what I
might look at next?  For testing purposes I dropped the security level on
Mandrake, made sure all permissions were set correctly on the appropriate
files and directories, and made sure all libraries were linked correctly.

SYSTEM-AUTH


auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/pam_krb5.so use_first_pass
forwardable
auth        required      /lib/security/pam_deny.so

account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so retry=3 minlen=4
dcredit=0  ucredit=0
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5
shadow
password    sufficient    /lib/security/pam_krb5.so use_authtok
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so
session     optional      /lib/security/pam_krb5.so


SYSLOG ERRORS
Jan 27 16:45:09 d-32-64 su: PAM unable to

> dlopen(/lib/security/pam_krb5.so)

> Jan 27 16:45:09 d-32-64 su: PAM [dlerror: /lib/security/pam_krb5.so:

> undefined $

> Jan 27 16:45:09 d-32-64 su: PAM adding faulty module:

> /lib/security/pam_krb5.so

> Jan 27 16:46:55 d-32-64 su: PAM unable to

> dlopen(/lib/security/pam_krb5.so)

> Jan 27 16:46:55 d-32-64 su: PAM [dlerror: /lib/security/pam_krb5.so:

> undefined $

> Jan 27 16:46:55 d-32-64 su: PAM adding faulty module:

> /lib/security/pam_krb5.so




More information about the Kerberos mailing list