Package: libpam-openafs-session
Version: 1.0-7
Severity: important

When logging in on a linux-vserver guest (using debian's linux-vserver
kernels and utilites), libpam-openafs-session does not create a PAG
and does not get tokens for the user.  I believe this did work OK with
the versions of the packages in sarge, but I have not been able to
make it work with etch (as you may notice from the package versions
listed below, I have also tried backporting newer openafs packages
from unstable a couple of times to try to fix this problem - the
problem does exist when using the etch versions of openafs packages as
well).

The same packages with the same configuration are being used on the
host system and other non-vserver systems and those systems do provide
users with PAGs and tokens.

The auth.log contains the following when a user logs in via ssh and does
not get at PAG and a token (I removed date/time/host from the beginning
of each line):

sshd[23136]: (pam_unix) session opened for user kcheek by (uid=0)
sshd[23136]: (pam_krb5): none: pam_sm_setcred: entry (0x2)
sshd[23136]: (pam_krb5): none: no context found, creating one
sshd[23136]: (pam_krb5): kcheek: found initial ticket cache at 
/tmp/krb5cc_pam_ehdDoC
sshd[23136]: (pam_krb5): kcheek: initializing ticket cache 
/tmp/krb5cc_11428_dsEb8E
sshd[23136]: (pam_krb5): kcheek: pam_sm_setcred: exit (success)
sshd[23136]: pam_openafs-krb5: open_session: AFS apparently not available

I'm wondering why the pam module thinks "AFS apparently not available".

Thanks!

-kevin

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-xen-vserver-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libpam-openafs-session depends on:
ii  libc6                 2.3.6.ds1-13etch5  GNU C Library: Shared libraries
ii  libpam-krb5           2.6-1              PAM module for MIT Kerberos
ii  openafs-client        1.4.5~pre2.dfsg1-1 AFS distributed filesystem client
ii  openafs-krb5          1.4.5~pre2.dfsg1-1 AFS distributed filesystem Kerbero

libpam-openafs-session recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to