Can't get Russ' pam_krb5 module to work with ssh on RHEL5

Russ Allbery rra at stanford.edu
Fri Mar 2 16:49:23 EST 2012


"Edgecombe, Jason" <jwedgeco at uncc.edu> writes:

> Ah, I do have "KerberosAuthentication yes" in my sshd config. Does
> pam_afs_session still run, then?

Yeah, sshd will still run the session stack.  pam-krb5 won't do anything,
but pam-afs-session will pick up any existing KRB5CCNAME environment in
the PAM environment, which it looks like sshd does set up in this case,
and run aklog based on that.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list