--On Friday, April 21, 2006 11:12 AM +0200 Dieter Schicker <[EMAIL PROTECTED]> wrote:

Hi,

I'm trying to get single-sign-on working with Kerberos/LDAP on Debian
Sarge. I want to ssh to other machines without having to supply the
password over and over again. Well, ssh login already works, but I have a
problem with libnss_ldap.conf: I want to apply a special pam_filter

pam_filter
objectclass=posixAccount)(|(trustmodel=fullaccess)(accessto=debian)

This isn't a valid filter...

pam_filter (&(objectClass=posixAcount)(|(trustmodel=fullaccess)(accessto=debian)))

perhaps...

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to