On 29/09/16 14:26, Lars Behrens wrote:
> Hi there,
> 
> I am trying to set up Kerberos-Authentication via pam.
> 
> I installed pam_krb5 and executed
> 
>   'authconfig --enablekrb5 --update'
> 
> but there is no kerberos-ticket created at login, only after an extra kinit.
> 
> I checked in /etc/pam.d/*, and found that there are no pam_krb5.so
> entries except the file smartcard-auth
> 
> So obviously I am doing something wrong or the authconfig mechanism
> doesn't work as expected.
> 
> Any hints for me?

Try using SSSD instead.  That is the service which can cache the users
password and fetch a ticket as soon as it can reach the KDC.  To only
use sssd for authentication, you use --enablesssdauth as option to
authconfig.

Some relevant man pages: sssd-krb5(5), sssd.conf(5), sssd(8)


-- 
kind regards,

David Sommerseth