Package: libpam-heimdal
Version: 1.0-17
Severity: important
xdm does not work with libpam-heimdal
Upon entering a correct password, the xdm login screen disappears, as
though login were proceeding, then xdm stops & the login screen
reappears
I avoid this problem with the no_ccache option, though this obviates
most of libpam-heimdal's usefulness, since single sign-on
authentication no-longer works -
auth sufficient pam_krb5.so use_first_pass no_ccache
Chip explains in bug #251088 that the problem is duplicate calls to
pam_setcred in xdm. He suggests -
> In xdm, I simply replace the second call to pam_setcred (the one in
> xc/programs/xdm/session.c) with pam_open_session.
He also suggests -
> In libpam-heimdal, I replace the existing open_session/close_session
> no-op functions with functions that setup and destroy the credentials
> cache.
I don't know whether this more recent pam_krb5 module already includes
improved open_session/close_session functions -
http://pam-krb5.sourceforge.net/
Unfortunately I'm not familiar with the PAM interface, but from what
I've read, the duplicate calls to pam_setcred constitute an important
bug in xdm
If not, then libpam-heimdal's reaction to duplicate pam_setcred calls
constitutes an important bug in libpam-heimdal
Many thanks for your sage contributions to Debian!
Jack
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
