>>>>> "EG" == Earl Greida <[EMAIL PROTECTED]> writes:

    EG> "Richard E. Silverman" <[EMAIL PROTECTED]> wrote in message
    EG> news:[EMAIL PROTECTED]
    >> >>>>> "EG" == Earl Greida <[EMAIL PROTECTED]>
    >> writes:
    >> 
    EG> FTP is fine.
    >>
    EG> The comment in the krb5-telnet file states that "The kerberized
    EG> telnet server accepts normal sessions", but that appears false.
    >>  No, it is true.  In prompting for a password, it is doing a
    >> "normal session," as opposed to requiring authentication via
    >> Kerberos ticket.  The problem is that telnetd is further configured
    >> to verify the password using Kerberos.  That is probably via PAM;
    >> look at /etc/pam.conf or in /etc/pam.d/.

    EG> Thanks for the help.  There is no /etc/pam.conf file.  There are a
    EG> ton of files in pam.d, but none contain telnet.  Any suggestions?
    EG> I am a bit hesitant to just going into these files and commenting
    EG> out lines.

Although the names often match up, they don't have to.  In this case,
telnetd is probably using the "login" PAM service.

-- 
  Richard Silverman
  [EMAIL PROTECTED]

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to