On Thu, Apr 14, 2005 at 04:08:51PM +0200, Simon Lyngshede wrote: > On Thu, Apr 14, 2005 at 03:31:39PM +0200, Thimo Neubauer wrote: > > ... or install "ssh-krb5" ;-) Then you can forward your > > Kerberos-tickets either by using -K or setting > > "GSSAPIDelegateCredentials yes" which is unfortunately undocumented > > (see http://bugs.debian.org/144291). > > > > Personally I can't get -K to work, but it might be due to my PAM > configuration. Generally I haven't had much luck with any of the > Kerberos features in ssh, but again that might very well be my > configuration being weird.
Or the usual ssh oddities: one thing which bit me several times was that changes in PAM only work after sshd is restarted (can't remember if reload was sufficient). The other one is the "privilege separation" which I switched off after having some trouble with it. If you like we can compare configurations off-list because -K works for me(tm) ;-) Cheers Thimo _______________________________________________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
