PAM - Kerberos issues

[Madhusudan Singh]

Matt Payton wrote:

> Madhusudan Singh wrote:
> 
> [...]
> 
>> Thanks for your response. How do I tell kerberos installation where to
>> find the compiled pam modules ?
> 
> I would guess that you'll have to recompile kerberos to include PAM, and
> as part of ./configure you'd tell it where the PAM libs are.
> 
> Again, this is just a guess...
> 

A guess I made before I posed my followup question. There do not seem to be
any such options in the kerberos configure script.

> Actually, now that I poked around on a RedHat based machine I see there
> is a specific pam_krb5afs package.  googling pam_krb5afs turns up quite
> a few hits, so maybe that's a good place to start...
> 

I found the pam_krb5 source code on sourceforge. But I cannot seem to find
pam_krb5afs. Further, the configure options for pam_krb5 seem to make
reference to existing kerberos 5 library and pam library paths :

  --with-pamdir=dir       Where to put pam module LIBDIR/security
  --with-krb5=dir         Look for Kerberos libs, headers in another
directory
  --with-krb4=dir         use Kerberos 4 headers and libs under dir
  --with-krbafs=dir       use Kerberos 5-hacked krbafs package under dir

So what should I do ? Compile kerberos first or pam_krb5 first ? And does
either give me pam_krb5afs ?

krbafs is another package entirely and does not seem to have anything to do
with pam_krb5afs (http://web.mit.edu/openafs/krbafs/).

I have been a slack user for more than a year and would gladly recommend
this to anyone anyday, but this mess with pam seems to be a serious
shortcoming to me.

Thanks for your response.