Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-25 Thread david l goodrich
On Tue, Feb 24, 2009 at 09:08:57PM -0800, Russ Allbery wrote: > david l goodrich writes: > > > It's a custom kernel, because it's a Xen domU. Which probably invites > > all kinds of pain. But its config file is used in a different Xen domU, > > which works fin

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 07:52:05PM -0800, Russ Allbery wrote: > david l goodrich writes: > > > Could it be my ssh config? I'm really grasping at straws, here. > > This bug report was sort of my last resort > > Given that the PAM module is being run, it shouldn&#x

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 07:11:01PM -0800, Russ Allbery wrote: > david l goodrich writes: > > On Tue, Feb 24, 2009 at 06:49:10PM -0800, Russ Allbery wrote: > > >> The extra high-numbered group won't necessarily show up, since PAGs are > >> really based on keyrin

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 06:49:10PM -0800, Russ Allbery wrote: > david l goodrich writes: > > > running `id`, and looking for something like this (copied from a working > > ubuntu box): > > d...@aether:~$ id > > uid=1000(dlg) gid=1000(dlg) groups=106(admin),1000(d

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 12:55:35PM -0800, Russ Allbery wrote: > david l goodrich writes: > > > Certainly, they were taken from your README. > > > > chaos:~# grep -v ^# /etc/pam.d/common-auth > > auth [success=ok default=1] pam_krb5.so > > auth [default=do

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Mon, Feb 23, 2009 at 08:53:37PM -0800, Russ Allbery wrote: > david l goodrich writes: > > > Package: libpam-afs-session > > Version: 1.7-1 > > Severity: important > > > > When logging in via SSH, a user does not get AFS tokens or a PAG, but > > they d

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-23 Thread david l goodrich
Package: libpam-afs-session Version: 1.7-1 Severity: important When logging in via SSH, a user does not get AFS tokens or a PAG, but they do get kerberos tickets. This works correctly via the console, but not SSH. -- System Information: Debian Release: 5.0 APT prefers testing APT policy: (50