root login via Kerberos5 - "User not known to the underlying authentication module" - why?

[Brandon Allbery]

On Fri, 2014-04-04 at 18:21 +0200, Wendy Lin wrote:
> On 24 March 2014 11:31, Wendy Lin <wendlin1974 at gmail.com> wrote:
> Of course, I do not know why this suddenly works. Can someone explain
> this? Why didn't it work when pam_unix came first?

Because root will always have a local account (required for the system
to operate) and the "sufficient" designation means that authentication
succeeds at that point without trying other authentication modules.

-- 
brandon s allbery kf8nh                           sine nomine associates
allbery.b at gmail.com                              ballbery at sinenomine.net
unix, openafs, kerberos, infrastructure, xmonad    http://sinenomine.net