For various reasons[1] I've found that the pam solution doesn't
cover all bases and I've resorted to putting aklog in
/etc/ssh/sshrc
If you have an sshrc it needs to deal with the xauth stuff as
well.
#
# Evil workaround for pam sshd stupidity.
if [ -n "$KRB5CCNAME" ] && [ -x /usr/bin/aklog ]
Thanks all mates. It's fixed now.
Eric
On Sat, Jun 11, 2011 at 10:20 PM, Booker Bense wrote:
>
> For various reasons[1] I've found that the pam solution doesn't cover all
> bases and I've resorted to putting aklog in
>
> /etc/ssh/sshrc
>
> If you have an sshrc it needs to deal with the xauth stu
Booker Bense writes:
> [1]- To be honest I've forgotten exactly what the combination was, but
> there was one edge case that I just couldn't get the pam based solution
> to work. The sshrc solution is also required on OS X.
I'd be really curious to get more details. (The solution to get
pam-afs
