Bug#340225: fatal: PAM: pam_setcred(): Error in service module
Oskar Liljeblad [EMAIL PROTECTED] writes: On Monday, November 21, 2005 at 15:35, Russ Allbery wrote: I can't duplicate this. It works great for me using the following configuration: authsufficient pam_unix.so nullok_secure authrequiredpam_krb5.so use_first_pass forwardable What version of the openssh-server package are you using? Also, do you have any session lines for pam_krb5.so? Thanks for looking into this. Sorry for not providing more info the first time. Anyway, here it is: rc openssh-server4.2p1-5 ii ssh-krb5 3.8.1p1-10 ii libkrb53 1.3.6-5 Perhaps I need to upgrade to openssh-server and purge ssh-krb5? (Perhaps then libpam-krb5 should conflict with ssh-krb5.) My /etc/pam.d/ssh: auth required pam_nologin.so @include common-auth auth required pam_krb5.so use_first_pass forwardable auth required pam_env.so @include common-account accountrequired pam_krb5.so @include common-session sessionoptional pam_motd.so sessionoptional pam_mail.so standard noenv sessionrequired pam_limits.so @include common-password Hm. I can't reproduce this with ssh-krb5 either. I just tried installing it and the current libpam-krb5 and it works correctly with me. I tried essentially the above setup as well as several different orders of the same, and everything worked great. I logged in without any trouble, got a ticket cache, and didn't get any error message like that. Are you still having trouble? -- Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#340225: fatal: PAM: pam_setcred(): Error in service module
On Monday, November 28, 2005 at 20:57, Russ Allbery wrote: [..] Hm. I can't reproduce this with ssh-krb5 either. I just tried installing it and the current libpam-krb5 and it works correctly with me. I tried essentially the above setup as well as several different orders of the same, and everything worked great. I logged in without any trouble, got a ticket cache, and didn't get any error message like that. Are you still having trouble? Well, I took someone's advice to upgrade to openssh-server, and I did. Now it works. So I'm afraid I won't be of much help here... Perhaps it's just best to close the bug Oskar -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#340225: fatal: PAM: pam_setcred(): Error in service module
Oskar Liljeblad [EMAIL PROTECTED] writes: Thanks for looking into this. Sorry for not providing more info the first time. Oh, no problem. Anyway, here it is: rc openssh-server4.2p1-5 ii ssh-krb5 3.8.1p1-10 ii libkrb53 1.3.6-5 Perhaps I need to upgrade to openssh-server and purge ssh-krb5? Well, I recomment this anyway, since openssh-server now has support for GSSAPI authentication and we're actually looking at making ssh-krb5 a transitional package for it at some point. But that being said, libpam-krb5 should still work with ssh-krb5, and if it doesn't that's probably a bug that may affect other PAM-using programs. I didn't test it explicitly since I'd naively thought it would be the same as openssh-server. I'll go take a look. Thanks! -- Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#340225: fatal: PAM: pam_setcred(): Error in service module
Package: libpam-krb5 Version: 1.2.0-1 Severity: normal Something seems to be wrong with pam_krb5.so auth when used for ssh. I have this line in my /etc/pam.d/ssh: auth required pam_krb5.so use_first_pass forwardable This is what I get when correct password is entered: sshd[32359]: fatal: PAM: pam_setcred(): Error in service module (and ssh just disconnects me). Removing the auth-line above fixes the problem. Regards, Oskar Liljeblad ([EMAIL PROTECTED]) -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.13.4 Locale: LANG=en_US, LC_CTYPE=en_GB (charmap=ISO-8859-1) Versions of packages libpam-krb5 depends on: ii libc6 2.3.5-7GNU C Library: Shared libraries an ii libcomerr21.38-2 common error description library ii libkrb53 1.3.6-5MIT Kerberos runtime libraries ii libpam0g 0.79-3 Pluggable Authentication Modules l libpam-krb5 recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#340225: fatal: PAM: pam_setcred(): Error in service module
Oskar Liljeblad [EMAIL PROTECTED] writes: Package: libpam-krb5 Version: 1.2.0-1 Severity: normal Something seems to be wrong with pam_krb5.so auth when used for ssh. I have this line in my /etc/pam.d/ssh: auth required pam_krb5.so use_first_pass forwardable This is what I get when correct password is entered: sshd[32359]: fatal: PAM: pam_setcred(): Error in service module (and ssh just disconnects me). Removing the auth-line above fixes the problem. I can't duplicate this. It works great for me using the following configuration: authsufficient pam_unix.so nullok_secure authrequiredpam_krb5.so use_first_pass forwardable What version of the openssh-server package are you using? Also, do you have any session lines for pam_krb5.so? -- Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#340225: fatal: PAM: pam_setcred(): Error in service module
On Monday, November 21, 2005 at 15:35, Russ Allbery wrote: [..] This is what I get when correct password is entered: sshd[32359]: fatal: PAM: pam_setcred(): Error in service module I can't duplicate this. It works great for me using the following configuration: authsufficient pam_unix.so nullok_secure authrequiredpam_krb5.so use_first_pass forwardable What version of the openssh-server package are you using? Also, do you have any session lines for pam_krb5.so? Thanks for looking into this. Sorry for not providing more info the first time. Anyway, here it is: rc openssh-server4.2p1-5 ii ssh-krb5 3.8.1p1-10 ii libkrb53 1.3.6-5 Perhaps I need to upgrade to openssh-server and purge ssh-krb5? (Perhaps then libpam-krb5 should conflict with ssh-krb5.) My /etc/pam.d/ssh: auth required pam_nologin.so @include common-auth auth required pam_krb5.so use_first_pass forwardable auth required pam_env.so @include common-account accountrequired pam_krb5.so @include common-session sessionoptional pam_motd.so sessionoptional pam_mail.so standard noenv sessionrequired pam_limits.so @include common-password Regards, Oskar -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
