[OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
Hello, I'm getting troubles to access my afs folders after loggin with pam_openafs_session.so (with using aklog). I'm running Debian Etch with custom kernel 2.6.18 and openafs 1.4.2-4. When I use kinit, I get the correct kerberos and afs tickets and tokens : [EMAIL PROTECTED]:~$ kinit [EMA

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Jacob Volstrup
Hi, On Mon, February 19, 2007 11:31, El Barto wrote: > When I log with ssh, I do not obtain afs tokens but I do obtain > kerberos tickets, and if I type aklog I obtain wrong afs tokens and I > got a Permission denied on my folders : > At our system (Ubuntu) we had to use the modified packages fr

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 11:42:37 +0100 (CET) "Jacob Volstrup" <[EMAIL PROTECTED]> wrote: > Hi, > > > On Mon, February 19, 2007 11:31, El Barto wrote: > > When I log with ssh, I do not obtain afs tokens but I do obtain > > kerberos tickets, and if I type aklog I obtain wrong afs tokens and I > > got

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread vladimir konrad
> I'm getting troubles to access my afs folders after loggin with > pam_openafs_session.so (with using aklog). > I'm running Debian Etch with custom kernel 2.6.18 > and openafs 1.4.2-4. > > When I use kinit, I get the correct kerberos and afs tickets and > tokens : what happens when you run ak

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 13:24:30 + vladimir konrad <[EMAIL PROTECTED]> wrote: > > I'm getting troubles to access my afs folders after loggin with > > pam_openafs_session.so (with using aklog). > > I'm running Debian Etch with custom kernel 2.6.18 > > and openafs 1.4.2-4. > > > > When I use kin

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Franco
On Feb 19, 2007, at 02:55pm, El Barto wrote: [EMAIL PROTECTED]> ssh [EMAIL PROTECTED] [EMAIL PROTECTED]'s password: Linux linux-pourri 2.6.18-3-686 #1 SMP Mon Dec 4 16:41:14 UTC 2006 i686 Are you using PAM in sshd's configuration? Post ssh_config and sshd_config files, there might be a ti

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Douglas E. Engert
Your test looks strange, as the same ticket cache (based on on your uid I assume) is being used in both the kinit and the ssh examples and the tickets have the same time. This would indicate the SSH did not gt you a kerberos ticket, of if it did it stored it in some other cache, and did not set

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 10:14:56 -0600 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: > Your test looks strange, as the same ticket cache (based on on your > uid I assume) is being used in both the kinit and the ssh examples and the > tickets have the same time. This would indicate the SSH did not >

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Douglas E. Engert
El Barto wrote: On Mon, 19 Feb 2007 10:14:56 -0600 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: Your test looks strange, as the same ticket cache (based on on your uid I assume) is being used in both the kinit and the ssh examples and the tickets have the same time. This would indicate the

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Bastian
On Mon, 19 Feb 2007 10:14:56 -0600 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: # Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes # Kerberos options KerberosAuthentication yes #KerberosGetAFSToken yes KerberosOrLocalPasswd yes KerberosTicketCleanup yes

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread El Barto
On Mon, 19 Feb 2007 21:25:08 +0100 Bastian <[EMAIL PROTECTED]> wrote: > > > On Mon, 19 Feb 2007 10:14:56 -0600 > > "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: > > > > > > # Change to no to disable tunnelled clear text passwords > > #PasswordAuthentication yes > > > > # Kerberos options > >

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread Douglas E. Engert
I have been mis-quoted below, the section of sshd_config file is not from me. I was suggesting that you not allow passwords at all, but allow GSSAPI. Don't let sshd do any Kerboers or AFS calls directly (gss are OK), but rely on PAM to do this. PasswordAuthentication no ChallengeResponseAu

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread El Barto
On Mon, 19 Feb 2007 11:31:42 +0100 El Barto <[EMAIL PROTECTED]> wrote: > > Hello, > > I'm getting troubles to access my afs folders after loggin with > pam_openafs_session.so (with using aklog). > I'm running Debian Etch with custom kernel 2.6.18 > and openafs 1.4.2-4. > I recompile the li

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread Russ Allbery
El Barto <[EMAIL PROTECTED]> writes: > El Barto <[EMAIL PROTECTED]> wrote: >> Hello, >> >> I'm getting troubles to access my afs folders after loggin with >> pam_openafs_session.so (with using aklog). >> I'm running Debian Etch with custom kernel 2.6.18 >> and openafs 1.4.2-4. > I recompile

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread El Barto
On Tue, 20 Feb 2007 09:07:13 -0800 Russ Allbery <[EMAIL PROTECTED]> wrote: > El Barto <[EMAIL PROTECTED]> writes: > > El Barto <[EMAIL PROTECTED]> wrote: > > >> Hello, > >> > >> I'm getting troubles to access my afs folders after loggin with > >> pam_openafs_session.so (with using aklog). > >>

Re: [OpenAFS] Probleme with aklog

2007-02-20 Thread Russ Allbery
El Barto <[EMAIL PROTECTED]> writes: > Russ Allbery <[EMAIL PROTECTED]> wrote: >> Oh, did you have Heimdal installed and not openafs-krb5? > heimdal, I've only installed openafs-client and the kernel module. Yeah, that'd do it. libpam-openafs-session assumes that the binary it's supposed to ru