Thank you for your krb5.conf hint. It works well with the text console login
(which uses /usr/local/sbin/login.krb5).
But the graphical authentication (using the PAM module) still has this
problem : the TGT flags do not contain "F". Do you know how to configure it
?

Thank you

Philippe

"Marc Horowitz" <[EMAIL PROTECTED]> a �crit dans le message de news:
[EMAIL PROTECTED]
> "Philippe Perrin" <[EMAIL PROTECTED]> writes:
>
> >> Can anyone tell me
> >> 1) what this "A" flag means ?
>
> It means the client used preauthentication to get the ticket.
>
> >> 2) what I have to configure to have the "F" (forwardable) flag on my
TGT ?
>
> Add to krb5.conf:
>
> [libdefaults]
>         forwardable = true
>
>                 Marc


________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to