-   Conectiva (
-   -   pam_krb5 won't retrieve a kerberos ticket (

Thakowbbery 06-15-2005 08:06 AM

pam_krb5 won't retrieve a kerberos ticket
I'm trying to use pam_krb5 in /etc/pam.d/system-auth in a Conectiva 10, but the module won't retrieve the ticket. I don't know what is wrong.
/var/log/messages show a "login: pam_krb5[2419]: authentication succeeds for '<user>' (<user>@<REALM>)" but the new ticket won't come.
What am I doing wrong?

ps: i also have pam_winbind and pam_mount into that same file
more info at

make 01-10-2007 05:20 AM

Same problem here. Mandriva 2007 will not let me login ("incorrect password"), although the log says "authentication succeeded" for the Kerberos-username on the client side and kinit also receives a valid ticket when launched manually. SuSE 10.1 works perfectly with the same Kerberos-server, I can login via SSH or locally, use su and so on.

In SuSE I enabled Kerberos on the client side by editing /etc/security/pam_unix2.conf according to Novell's instructions. There is no such file for Mandriva. How do I enable Kerberos on Mandriva for PAM on the client side with pam_krb5?

Tried editing /etc/pam.d/* in a thousand ways. I can enable LDAP authentication easily the same way, but not Kerberos. I have been mostly trying to modify the files "login" and "system-auth", but it seems to be useless. Is pam_krb5 for Mandriva broken?

All times are GMT -5. The time now is 12:30 AM.