Ken Hornstein ([EMAIL PROTECTED]) wrote: : But if you're doing GSSAPI, then pam is never being invoked, right?
No, if PAM support is enabled then the account and session portions of the ssh PAM stack will be invoked, even for a GSSAPI login. This enables things like the gaining of additional credentials after login, access control, and logging. Cheers, Simon. ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
