My understanding of that krb4_convert is not that it stops pam_krb5 from trying to get krb4 tickets, it just means it tries to get krb4 tickets directly from kerberos 4 server instead of using krb524d.

On 2004.07.02 17:08 Matthew Miller wrote:
[oh yeah; I was going to reply to some other stuff in this message
too]

On Fri, Jul 02, 2004 at 04:42:16PM -0400, Jack Neely wrote:
> Ummm...seems I haven't actually tested on an SMP box.  :-)  My
current
> FC2 test machine is a laptop, the SMP test boxes are currently being
> build machines for RHEL.

If you get a chance, I'd appreciate hearing the results.


> BTW, have you experianced login failures with OpenAFS on FC1 with the > latest couple release kernels? I'm getting a segfault in the login > process somewhere...can't get anything to tell me what's dieing. But > AFS/Kerb users can't log in.

We have a problem where pam_krb5 tries to do a 5-to-4 conversion, even
though we set krb4_convert to false. (We don't want that module to try
to do
anything with AFS; the vast majority of our AFS users just need read
access
to public areas, and those that need more can klog.) The net result is
a
50-second delay, and then you finally get in.

On the off chance that this is what you're seeing too, here's my
workaround:
<https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126345>.

--
Matthew Miller           [EMAIL PROTECTED]
<http://www.mattdm.org/>
Boston University Linux      ------>
<http://linux.bu.edu/>
_______________________________________________
OpenAFS-devel mailing list
[EMAIL PROTECTED]
https://lists.openafs.org/mailman/listinfo/openafs-devel


-- ******************************** David William Botsch Consultant/Advisor II CCMR Computing Facility [EMAIL PROTECTED] ******************************** _______________________________________________ OpenAFS-devel mailing list [EMAIL PROTECTED] https://lists.openafs.org/mailman/listinfo/openafs-devel

Reply via email to