On Mon, 26 Nov 2001, Marc Schmitt wrote:

> On http://www.tu-chemnitz.de/urz/afs/afs_pam.html, it says that 
> set_token should only be used if the application does NOT call 
> pam_setcred(), I took it out of system-auth, but it didn`t change 
> anything. Any hints welcome. Thanks.

For screensavers it should be better to use "refresh_token", because you
want to have a new token within the old PAG.

We use this configuration (on Redhat 6.2) for xscreensaver:

% cat /etc/pam.d/xscreensaver
auth       sufficient   /lib/security/pam_afs.krb.so.1 ignore_root refresh_token
auth       required     /lib/security/pam_pwdb.so try_first_pass
%

and it works for us.

Thomas.
-- 
-----------------------------------------------------------------------
Thomas M�ller, TU Chemnitz, Universit�tsrechenzentrum, D-09107 Chemnitz
mail: [EMAIL PROTECTED]
-----------------------------------------------------------------------

_______________________________________________
OpenAFS-info mailing list
[EMAIL PROTECTED]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to