Hello, On Fri, Feb 23, 2007 at 09:05:57AM -0800, [EMAIL PROTECTED] wrote: > > I'm not sure if this is the correct behavior or not. I inherited it, and > I don't know if there's any documentation about what one is *supposed* to > to. It causes strange problems on Solaris 8 and 9 as well (I haven't been > able to test Solaris 10).
(IIRC, OpenSolaris 10's su does not open PAM sessions.) pam-krb5's behavior is probably correct. (maybe it could implement PAM_DATA_SILENT support for pam_end; but it would not help in this case, as su do not use it;) Philipp, does su seems to behave correctly when you remove the pam_end call in the child? My current opinion is that we should remove this pam_end, which would make the su behavior consistent with login. (BTW, does login behaves correctly regarding pam-krb5?) Kind Regards, -- Nekral -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
