Can't get Russ' pam_krb5 module to work with ssh on RHEL5

[Russ Allbery]

"Edgecombe, Jason" <jwedgeco at uncc.edu> writes:

> Ah, I do have "KerberosAuthentication yes" in my sshd config. Does
> pam_afs_session still run, then?

Yeah, sshd will still run the session stack.  pam-krb5 won't do anything,
but pam-afs-session will pick up any existing KRB5CCNAME environment in
the PAM environment, which it looks like sshd does set up in this case,
and run aklog based on that.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>