Kerberos-Mandrake 9.2
Sebastien Varrette
Sebastien.Varrette at imag.fr
Fri Feb 13 12:29:57 EST 2004
RBR wrote:
> Has anyone had success using Kerberos to authenticate to a Mandrake 9.2
> workstation? I have been working on this for some time now, with no luck
> whatsoever. So far I have done the following. I installed the following
> Mandrake RPM's: krb5-workstation, pam_krb5, and libkrb5, along with the few
> dependencies. I configured system-auth and krb.conf. I could not login via
> KDM, or even at the command prompt using kerberos. I could login with a
> local account, not using kerberos, and then run kinit and get a kerberos
> ticket. I checked syslog and noticed that I get errors loading the
> appropriate kerberos libraries in system-auth (see errors below).
> After this I tried using RPMS from different sources with the same result.
> I then decided to compile both pam_krb5 and libkrb5 from source. Everything
> compiled fine with no errors, but I still get the same errors. I have had
> no problems with kerberos on other distributions. Any ideas as to what I
> might look at next? For testing purposes I dropped the security level on
> Mandrake, made sure all permissions were set correctly on the appropriate
> files and directories, and made sure all libraries were linked correctly.
>
> SYSTEM-AUTH
>
>
> auth required /lib/security/pam_env.so
> auth sufficient /lib/security/pam_unix.so likeauth nullok
> auth sufficient /lib/security/pam_krb5.so use_first_pass
> forwardable
> auth required /lib/security/pam_deny.so
>
> account required /lib/security/pam_unix.so
>
> password required /lib/security/pam_cracklib.so retry=3 minlen=4
> dcredit=0 ucredit=0
> password sufficient /lib/security/pam_unix.so nullok use_authtok md5
> shadow
> password sufficient /lib/security/pam_krb5.so use_authtok
> password required /lib/security/pam_deny.so
>
> session required /lib/security/pam_limits.so
> session required /lib/security/pam_unix.so
> session optional /lib/security/pam_krb5.so
>
>
> SYSLOG ERRORS
> Jan 27 16:45:09 d-32-64 su: PAM unable to
>
>
>>dlopen(/lib/security/pam_krb5.so)
>
>
>>Jan 27 16:45:09 d-32-64 su: PAM [dlerror: /lib/security/pam_krb5.so:
>
>
>>undefined $
>
>
>>Jan 27 16:45:09 d-32-64 su: PAM adding faulty module:
>
>
>>/lib/security/pam_krb5.so
>
>
>>Jan 27 16:46:55 d-32-64 su: PAM unable to
>
>
>>dlopen(/lib/security/pam_krb5.so)
>
>
>>Jan 27 16:46:55 d-32-64 su: PAM [dlerror: /lib/security/pam_krb5.so:
>
>
>>undefined $
>
>
>>Jan 27 16:46:55 d-32-64 su: PAM adding faulty module:
>
>
>>/lib/security/pam_krb5.so
>
>
>
Got a similar problem... Found I've done something wrong but I dunno
what (it is still quite possible :-) ) But I'm happy to see someone else
with that problem.
Hope someone will have an idea...
More information about the Kerberos
mailing list