Fredrik Tolf <[email protected]> writes: > Ever since I upgraded to Lenny, I cannot use GSSAPI to log in over SSH, > and the problem seems to be with pam_krb5. When I turn on debug logging > on it through PAM, I get the following messages:
Could you show me your PAM configuration? I suspect that you're not properly handling the ignore return value, which would have been a latent bug with previous versions that happened not to be exposed. > The EXIT macro looks like this: > > #define EXIT(args, pamret) \ > pamk5_debug((args), "%s: exit (%s)", __func__, \ > ((pamret) == PAM_SUCCESS) ? "success" \ > : (((pamret) == PAM_IGNORE) ? "ignore" : "failure")) You're looking at the wrong source code to diagnose a problem with lenny. The above is the code from 3.12 or later, but lenny released with 3.11, which logs ignore (incorrectly) as failure. -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
