Franco "Sensei" wrote:

Hi.

I'm using openssh 3.9p1 for sso under various distributions: mainly debian which ships with openssh 3.4p1, suse and rh (the latter is not so important for me now). My environment is openafs (no kaserver), mit kerberos 5.

Suse user heimdal, so kinit gets tickets and a token directly. I can ssh without passwords between suse machines but I can't get the respective token:

Make sure you are using the pam module. Here's the /etc/security/pam_unix2.conf file on all my suse systems:

auth:   call_modules=krb5afs nullok
account:        use_ldap call_modules=krb5afs
password:       call_modules=krb5afs nullok
session:        none


You may not have LDAP installed on your systems though, so the main thing you're after is the krb5afs entries. I am using the stock OpenSSH and OpenAFS on all my SuSE boxes and everything works fine, no patches needed.


John
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to