Right, I agree with you. I guess my original concern was that the su delay was symptomatic of some larger problem with my AFS or PAM setup. But if it's really only going to happen in the narrow set of circumstances I've outlined, then it's not a critical issue; it's not like many of the AFS accounts will have su access anyway.
thanks, eric --- On Thu, 3/18/10, Andrew Deason <[email protected]> wrote: > From: Andrew Deason <[email protected]> > Subject: [OpenAFS] Re: significant delay for afs user to login as root via su > To: [email protected] > Date: Thursday, March 18, 2010, 2:55 PM > On Thu, 18 Mar 2010 12:42:34 -0700 > Carson Gaspar <[email protected]> > wrote: > > > [email protected] > wrote: > > > That doesn't seem to be working either. > Maybe there is something > > > else going on? Notice the "X11 connection > rejected" error: > > > > So I actually did some testing. Environment variables > set in .ssh/rc > > are ignored by your login shell. So you either need to > set XAUTHORITY > > in .ssh/environment and set PermitUserEnvironment to > yes in > > sshd_config, or you need to set it in your shell login > scripts > > (.bash_profile or whatever). > > Or as suggested by Booker Bense, you can set it in > pam_env.conf, which > will set it for both the PAM environment and your shell, > won't it? > > That approach also makes this work for all users, without > them having to > do something special in their init scripts or .ssh/. > > -- > Andrew Deason > [email protected] > > _______________________________________________ > OpenAFS-info mailing list > [email protected] > https://lists.openafs.org/mailman/listinfo/openafs-info > _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
