root login via Kerberos5 - User not known to the underlying authentication module - why?

2014-03-24 Thread Wendy Lin
I am trying to allow user root (uid=0) to be authenticated via Kerberos5 at login time, too, but if I do I get a User not known to the underlying authentication module error and login is refused. OS is Suse 13.1 pam config is: grep -r krb5 /etc/pam.d/ /etc/pam.d/common-password-pc:password

Re: root login via Kerberos5 - User not known to the underlying authentication module - why?

2014-03-24 Thread Predrag Zecevic [Unix Systems Administrator]
On 03/24/14 11:31 AM, Wendy Lin wrote: I am trying to allow user root (uid=0) to be authenticated via Kerberos5 at login time, too, but if I do I get a User not known to the underlying authentication module error and login is refused. OS is Suse 13.1 pam config is: grep -r krb5 /etc/pam.d/

Re: On credential cache separation between service ticket and TGT

2014-03-24 Thread Arpit Srivastava
Hi Greg, I followed the steps you described in your previous mail, however, what I observed is that if TGT is not present in cache file - gss_init_sec_context fails with min_status KRB5_CC_NOTFOUND. Pls see the klist output of each cache file and corresponding Kerberos trace log below.

Re: On credential cache separation between service ticket and TGT

2014-03-24 Thread Greg Hudson
On 03/24/2014 02:23 PM, Arpit Srivastava wrote: I followed the steps you described in your previous mail, however, what I observed is that if TGT is not present in cache file - gss_init_sec_context fails with min_status KRB5_CC_NOTFOUND. If I create a ccache with only a service ticket using