Re: [OpenAFS] kerberos + pam

2004-10-18 Thread Douglas E. Engert
Jeffrey Hutzelman wrote: On Friday, October 15, 2004 16:40:16 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: Jeffrey Hutzelman wrote: On Friday, October 15, 2004 13:39:44 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: The gafstoken is a single routine that will issue a syscall to g

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Jeffrey Hutzelman
On Friday, October 15, 2004 16:40:16 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: Jeffrey Hutzelman wrote: On Friday, October 15, 2004 13:39:44 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: The gafstoken is a single routine that will issue a syscall to get a PAG then fork/exec yo

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Derrick J Brashear
A message being sent to the 4 and 4 other people. Yuck. The headers are larger than the new content:-\ Does it implement the syscall replacement interface we use on Linux 2.6? Not yet, but I suppose it could. The intent if the program was to make it simple so any vendor could build it even if the

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Douglas E. Engert
Jeffrey Hutzelman wrote: On Friday, October 15, 2004 13:39:44 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: The gafstoken is a single routine that will issue a syscall to get a PAG then fork/exec your favorite aklog to get a token. gafstoken has no AFS or Kerberos dependiencies (other the

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Jeffrey Hutzelman
On Friday, October 15, 2004 13:39:44 -0500 "Douglas E. Engert" <[EMAIL PROTECTED]> wrote: The gafstoken is a single routine that will issue a syscall to get a PAG then fork/exec your favorite aklog to get a token. gafstoken has no AFS or Kerberos dependiencies (other then knowing the PAG syscall)

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Sergio Gelato
* Maurizio Santini [2004-10-14 14:08:15 -0300]: > - > auth required /lib/security/pam_securetty.so > auth required /lib/security/pam_nologin.so > #auth sufficient /lib/security/pam_afs.krb.so use_first_pass > auth sufficie

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Douglas E. Engert
Sensei wrote: On Thu, 2004-10-14 at 19:08, Maurizio Santini wrote: 1) When I use the module provided by kerberos package (pam_krb5afs.so) I 2) If I use the same module provided by 3) If I use the module pam_afs.krb.so provided by the openafs rpms I get I suppose that - you're not running kaserver

Re: [OpenAFS] kerberos + pam

2004-10-15 Thread Sensei
On Thu, 2004-10-14 at 19:08, Maurizio Santini wrote: > 1) When I use the module provided by kerberos package (pam_krb5afs.so) I > 2) If I use the same module provided by > 3) If I use the module pam_afs.krb.so provided by the openafs rpms I get I suppose that - you're not running kaserver - you ha

[OpenAFS] kerberos + pam

2004-10-14 Thread Maurizio Santini
I have installed MIT KerberosV version 1.3.4 on RedHat7.3 (master kdc) and RedHat9 (client) and I'm using openafs 1.2.11. The following is my /etc/pam.d/login (system-auth is the same) and I have the following problems: - auth required /lib/sec