Matthew Gabeler-Lee <chee...@fastcat.org> writes: > Package: libpam-heimdal > Version: 4.7-4 > Severity: normal
> The libpam-krb5 package has a couple issues when trying to configure > credential cache files: > 1) The documentation claims you can set the credential cache filename in > krb5.conf, but this appears to be a lie. If you don't give the pam ccache= > option, then it uses a hard coded string to form the cache filename, > disregarding any settings in krb5.conf. Could you show me your krb5.conf file where you tried to set this? > 2) Because /usr/share/pam-configs/krb5 is not a conffile, there's no way > to edit the pam settings without risking them getting clobbered on a > package update, other than by disabling the module in the system level > config and then adding it back in by hand, which is a bit of a pain in > the tuchus. Yeah, this is how the PAM update system works. I can't change this as a PAM package maintainer (and there are a bunch of reasons why it works this way). If you have to set PAM options, you have to disable automated updates and manually configure PAM, and that probably won't change. However, hopefully I can fix 1 and that will resolve your issue. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
