Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-25 Thread david l goodrich
On Tue, Feb 24, 2009 at 09:08:57PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: It's a custom kernel, because it's a Xen domU. Which probably invites all kinds of pain. But its config file is used in a different Xen domU, which works fine. I've attached it, I'm

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Mon, Feb 23, 2009 at 08:53:37PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: Package: libpam-afs-session Version: 1.7-1 Severity: important When logging in via SSH, a user does not get AFS tokens or a PAG, but they do get kerberos tickets. This works

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 12:55:35PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: Certainly, they were taken from your README. chaos:~# grep -v ^# /etc/pam.d/common-auth auth [success=ok default=1] pam_krb5.so auth [default=done] pam_afs_session.so debug

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 06:49:10PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: running `id`, and looking for something like this (copied from a working ubuntu box): d...@aether:~$ id uid=1000(dlg) gid=1000(dlg) groups=106(admin),1000(dlg),1104162558 d...@aether

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 07:11:01PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: On Tue, Feb 24, 2009 at 06:49:10PM -0800, Russ Allbery wrote: The extra high-numbered group won't necessarily show up, since PAGs are really based on keyrings. If you run tokens, what

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-24 Thread david l goodrich
On Tue, Feb 24, 2009 at 07:52:05PM -0800, Russ Allbery wrote: david l goodrich d...@dsrw.org writes: Could it be my ssh config? I'm really grasping at straws, here. This bug report was sort of my last resort grin Given that the PAM module is being run, it shouldn't be. UsePAM being set

Bug#516864: libpam-afs-session: PAGs not used on SSH login

2009-02-23 Thread david l goodrich
Package: libpam-afs-session Version: 1.7-1 Severity: important When logging in via SSH, a user does not get AFS tokens or a PAG, but they do get kerberos tickets. This works correctly via the console, but not SSH. -- System Information: Debian Release: 5.0 APT prefers testing APT policy: