Force to change password for users

Ken Hornstein kenh at cmf.nrl.navy.mil
Fri Apr 19 13:34:32 EDT 2024


>User acquires kerberos ticket and login session is authorized. This log
>is for a ssh access ...

I think you're missing some of the details that Greg is asking.  When you
say "ssh access", do you mean that you are using gssapi-with-mic or
gssapi-keyex authentication with ssh, or does ssh ask for the user's
Kerberos password?  If the latter, ssh does not have that native ability,
so it it going through the PAM stack to make that happen?  If so, which
PAM module are you using?

--Ken


More information about the Kerberos mailing list