I assume that you also get the same error whenever you just run 'kinit' as a user, right?

You can disable pkinit for Kerberos without removing the pkinit software by adding the following to /etc/krb5.conf:

[appdefaults]
 pkinit = {
  allow_pkinit = false
 }



If you already have an [appdefaults] section in /etc/krb5.conf, then just add the 'pkinit' stanza as shown above.


Thanks,

Chris Wing
[EMAIL PROTECTED]


On Thu, 20 Sep 2007, jef e wrote:

Hi again - still poking at our Redhat 5 installation here and running across an error with pcscd. If I disable this daemon, I get the following error during the initial invocation of sudo (when the password is required). It does not happen to subsequent sudo events during the cache period.

winscard_clnt.c:320:SCardEstablishContextTH() Cannot open public shared file: /var/run/pcscd.pub

I can't seem to find where the system is making the check for this. We're using kerberos for our authentication

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to