Kerberos on Solaris 9

[Pierre Goyette]

Laurent,

I gave up trying to get Sun's Kerberos working on Solaris 9.  I
installed the MIT 1.3.3 binaries on my sun box which is an application
server.

I configured my /etc/krb5.conf, /etc/inetd.conf and my /etc/krb5.keytab
file.

When I telnet to the sun box, I get logged in automatically (e.g. I see
the "Last login: xxx" line appear) and then I get asked for a password
again. I know that this is solaris asking for the password again (and
not Kerberos). I do not have anything set in /etc/pam.conf and have read
that Sun's pam_krb.so.1 is not compatible with MIT Kerberos.

What do I need to do to pam to get this working properly?

TIA

Pierre

-----Original Message-----
From: kerberos-bounces at MIT.EDU [mailto:kerberos-bounces at MIT.EDU] On
Behalf Of Laurent Bailly
Sent: Saturday, May 29, 2004 4:52 AM
To: kerberos at MIT.EDU
Subject: Re: Kerberos on Solaris 9

Hi,

All depends on your pam.conf configuration.
To troubleshoot :

- First, try to put some order in your pam.conf (login section then
telnet, ... other ) It will help to modify pam during tests.

- Add entries syslog.conf for auth.debug and *.debug.

- Then put pam in debug mode (touch /etc/pam_debug)

- Tail the kdc.log

- You can also install ethereal to monitor package exchange.

=> It helps me to fine tune pam.conf.

LBA

--
<laurent.bailly at swing.be>
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos