Kerberos auth based on ticket
simon at sxw.org.uk
Tue Dec 16 09:52:31 EST 2008
On 16 Dec 2008, at 14:32, Rowley, Mathew wrote:
> My question was more - if you have PAM and GSSAPI both enables,
> will the ssh client still go through the PAM stack (for
> authorization purposes).
Yes it will.
Any authorization rules enforced by the account step, any additional
credentials gained by the setcred step, and any session
initialisation performed by the session step will all occur for
GSSAPI authenticated connections.
More information about the Kerberos