Oskar Liljeblad <[EMAIL PROTECTED]> writes: > On Monday, November 21, 2005 at 15:35, Russ Allbery wrote:
>> I can't duplicate this. It works great for me using the following >> configuration: >> >> auth sufficient pam_unix.so nullok_secure >> auth required pam_krb5.so use_first_pass forwardable >> >> What version of the openssh-server package are you using? Also, do you >> have any session lines for pam_krb5.so? > Thanks for looking into this. Sorry for not providing more info the > first time. Anyway, here it is: > rc openssh-server 4.2p1-5 > ii ssh-krb5 3.8.1p1-10 > ii libkrb53 1.3.6-5 > Perhaps I need to upgrade to openssh-server and purge ssh-krb5? (Perhaps > then libpam-krb5 should conflict with ssh-krb5.) My /etc/pam.d/ssh: > auth required pam_nologin.so > @include common-auth > auth required pam_krb5.so use_first_pass forwardable > auth required pam_env.so > @include common-account > account required pam_krb5.so > @include common-session > session optional pam_motd.so > session optional pam_mail.so standard noenv > session required pam_limits.so > @include common-password Hm. I can't reproduce this with ssh-krb5 either. I just tried installing it and the current libpam-krb5 and it works correctly with me. I tried essentially the above setup as well as several different orders of the same, and everything worked great. I logged in without any trouble, got a ticket cache, and didn't get any error message like that. Are you still having trouble? -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]