SCIENTIFIC-LINUX-USERS Archives

September 2016

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: authconfig: pam_krb5.so entries missing
From:
Lars Behrens <[log in to unmask]>
Reply To:
Lars Behrens <[log in to unmask]>
Date:
Fri, 30 Sep 2016 09:28:36 +0200
Content-Type:
multipart/signed
Parts/Attachments:
text/plain (609 bytes) , smime.p7s (5 kB) 
Am 29.09.2016 um 19:18 schrieb David Sommerseth:

> Try using SSSD instead.  That is the service which can cache the users
> password and fetch a ticket as soon as it can reach the KDC.  To only
> use sssd for authentication, you use --enablesssdauth as option to
> authconfig.

Hm... I already am using sssd. And it is obviously working for the main
part, except just for the kinit right at login. Which made me think of a
pam problem.

So you are saying that krb5 should not be mentioned in pam.d/* with
sssd-auth? I wasn't aware of that.

So there must be some misconfiguration here, will try to find out.

Thanx!

Cheerz,
Lars

ATOM RSS1 RSS2