>       I would recommend changing your common-auth so that pam is not 
> required.  Mine reads like this:
> 
> #auth   required        pam_unix.so nullok_secure
> auth       sufficient   pam_krb5.so
> auth       sufficient   pam_unix.so nullok try_first_pass
> auth       required     pam_deny.so
> 
>       So I have pam_unix.so commented out where it's defined as required 
>       and include it on another line as sufficient.  That may be what's blocking 
> you.

Still no go, and I have the exact same common-auth as you.  Something
else I just realized, though, is that I'm using NIS for distributing
account information.

Maybe I'm missing something with that... my nsswitch.conf file is:

passwd:         compat
group:          compat
shadow:         compat

[EMAIL PROTECTED]:~$ ypcat passwd
wchow:x:1000:100:Wes Chow,,,:/home/wchow:/bin/bash


Do I need anything in PAM for this?

Thanks,
Wes

-- 
http://www.woahnelly.net/~wes/          OpenPGP key = 0xA5CA6644
fingerprint = FDE5 21D8 9D8B 386F 128F  DF52 3F52 D582 A5CA 6644
________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to