Marcus Better <[EMAIL PROTECTED]> writes: > /etc/pam.d/common-auth: > ------------ > auth sufficient pam_krb5.so ignore_root > auth required pam_unix.so try_first_pass nullok_secure > ------------
> /etc/pam.d/common-session: > ------------ > session optional pam_krb5.so ignore_root > session required pam_unix.so > ------------ Hm. That looks okay. Could you add "debug" to the end of the two pam_krb5.so lines and then send me the resulting log output from syslog of a successful login that doesn't save the ticket cache? Thanks! -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]