"Edgecombe, Jason" <jwedg...@uncc.edu> writes: > Ah, I do have "KerberosAuthentication yes" in my sshd config. Does > pam_afs_session still run, then?
Yeah, sshd will still run the session stack. pam-krb5 won't do anything, but pam-afs-session will pick up any existing KRB5CCNAME environment in the PAM environment, which it looks like sshd does set up in this case, and run aklog based on that. -- Russ Allbery (r...@stanford.edu) <http://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
