On 10/12/2025 7:56 PM, Jeffrey E Altman wrote:
Becoming 'root' via sudo is one of the cases where you do want a PAG to be acquired.   Do you have a "session required pam_afs_session.so" rule specified in each of the /etc/pam.d/sudo* configuration files?

I believe what is necessary is to add

      session optional pam_afs_session.so notokens

to /etc/pam.d/sudo

Jeffrey Altman


_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to