Kerberos tickets, SSH public key auth, AFS tokens

Russ Allbery rra at stanford.edu
Wed Dec 16 20:33:45 EST 2009


Jeff Blaine <jblaine at stage-infinity.com> writes:

> sshd[20489]: [ID 237248 auth.debug] (pam_afs_session): 
> pam_sm_open_session: entry (0x0)
> sshd[20489]: [ID 237248 auth.debug] (pam_afs_session): skipping tokens, 
> no Kerberos ticket cache

Hm, are you sure that tickets are being forwarded?  In other words, after
login, if you run klist, do you have a ticket cache?

(It's expected that pam-krb5 will do nothing in the case of GSSAPI
authentication.)

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list