problem setting up ssh-krb5 from Debian Sarge

Wes Chow wes at
Thu Oct 28 15:43:44 EDT 2004

> 	Yeah, it looks like the user account "wchow" doesn't exist on the 
> remote machine, which seems odd since you said that the telnet works. 
> But the line in your output:
> debug1: Starting up PAM with username "wchow"
> Failed none for wchow from port 32804 ssh2
> 	... shows that PAM is failing this user log in.
> D.
> Sam Hartman wrote:
> > Your pam account stack is claiming that you are not authorized to log
> > in.

Do I have to do anything special to my PAM stack?  I haven't touched
it at all.

On a possibly related note, I'm having problems getting PAM
authentication to work with console logins.  I've added the line "auth
sufficient forwardable" to /etc/pam.d/common-auth and
"session optional" to /etc/pam.d/common-session.  It's
complaining with the error "Authentication service cannot retrieve
authentication info."  Googling on that, ironically, comes up with
my previous email about not being able to get ssh-krb5 to work.

--          OpenPGP key = 0xA5CA6644
fingerprint = FDE5 21D8 9D8B 386F 128F  DF52 3F52 D582 A5CA 6644

More information about the Kerberos mailing list