Can't get Russ' pam_krb5 module to work with ssh on RHEL5

Russ Allbery rra at stanford.edu
Mon Mar 5 14:12:16 EST 2012


"Edgecombe, Jason" <jwedgeco at uncc.edu> writes:

> Ok, should I set "KerberosAuthentication no" in my sshd config?

It's really your call.  If you're happy with how it works, I don't see a
compelling reason to change.  We don't use it, though; we use PAM.

One thing that you may lose with that (I haven't checked) is proper
handling of expired passwords.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list