Wendy Lin <wendlin1...@gmail.com> writes: > Does anyone have a good idea why pam_krb5 does not appear to be called > for su - root while exec login root calls pam_krb5?
Check /etc/pam.d/su and see if su has special rules that cause it to bypass your regular PAM configuration. Sometimes it does. Also, note that su's PAM configuration generally bypasses the rest of the PAM authentication stack if run as root, so it's normal to not see PAM auth stack invocations unless you're running that command as a regular user. -- Russ Allbery (ea...@eyrie.org) <http://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
