Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-14 Thread Walter Lamagna
I am using PAM + AFS to authenticate the user, i have given persmissions to everybody read the .ssh directory of the users home directory, but ssh complains with: pam_afs[25129]: AFS Won't use illegal password for user walter How could i resolve it ? Thanks Walter On Thu, 2007-03-08 at 10:20

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-14 Thread Russ Allbery
Walter Lamagna [EMAIL PROTECTED] writes: I am using PAM + AFS to authenticate the user, i have given persmissions to everybody read the .ssh directory of the users home directory, but ssh complains with: pam_afs[25129]: AFS Won't use illegal password for user walter How could i resolve it

[OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Alexander Al
Hi! Is there a possibility that you can use the authorized keys with ssh? when I try I get this message: z:~/NAG # ssh [EMAIL PROTECTED] Enter passphrase for key '/root/.ssh/id_dsa': Last login: Wed Mar 7 23:50:00 2007 from z.z.nl Could not chdir to home directory

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Simon Wilkinson
On 8 Mar 2007, at 10:16, Alexander Al wrote: Is there a possibility that you can use the authorized keys with ssh? The problem is that ssh's authorized keys authentication mechanism has no way of getting you a Kerberos ticket, and therefore, no way of getting you an AFS token in order to

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Alexander Al
Simon Wilkinson wrote: On 8 Mar 2007, at 10:16, Alexander Al wrote: Is there a possibility that you can use the authorized keys with ssh? The problem is that ssh's authorized keys authentication mechanism has no way of getting you a Kerberos ticket, and therefore, no way of getting

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Jim Rees
Alexander Al wrote: I'll tell the user : can't (because he is connecting from outside.) That's the wrong answer. This should go in a FAQ somewhere. You just need to make the public key world readable. That's difficult because ssh wants to put public and private keys both in the same

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Alexander Al
Jim Rees wrote: Alexander Al wrote: I'll tell the user : can't (because he is connecting from outside.) That's the wrong answer. This should go in a FAQ somewhere. You just need to make the public key world readable. That's difficult because ssh wants to put public and private keys

Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread Robert Banz
On Mar 8, 2007, at 10:20, Jim Rees wrote: Alexander Al wrote: I'll tell the user : can't (because he is connecting from outside.) ...or, if he has a kerberos gss-api-ticket-passing enabled ssh on his end, he can kinit to your realm and make the magic happen ;) -rob Robert Banz

RE: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

2007-03-08 Thread ted creedon
Wilkinson; openafs-info@openafs.org Subject: Re: [OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation. On Mar 8, 2007, at 10:20, Jim Rees wrote: Alexander Al wrote: I'll tell the user : can't (because he is connecting from outside.) ...or, if he has a kerberos gss-api-ticket