On 27 March 2014 18:37, Russ Allbery <ea...@eyrie.org> wrote: > Wendy Lin <wendlin1...@gmail.com> writes: > >> Does anyone have a good idea why pam_krb5 does not appear to be called >> for su - root while exec login root calls pam_krb5? > > Check /etc/pam.d/su and see if su has special rules that cause it to > bypass your regular PAM configuration. Sometimes it does. > > Also, note that su's PAM configuration generally bypasses the rest of the > PAM authentication stack if run as root, so it's normal to not see PAM > auth stack invocations unless you're running that command as a regular > user.
Where is the pam config which controls whether pam_krb5 is not called for user root? Wendy ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos