LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-24-2007, 06:29 PM   #1
licht
Member
 
Registered: Mar 2005
Location: chicago
Distribution: red hat 9.0
Posts: 59

Rep: Reputation: 15
Question Howto Kerberos+PAM login?


Want to use kerberos for pam-awared XDM. In /etc/pam.d, xdm uses the following rules:

Quote:
auth required pam_env.so
auth sufficient pam_unix2.so
auth required pam_krb5.so try_first_pass
But it denies any login even though username and password are correct. When the last 2 from above rules switched, it asks for password twice for a valid user. In all cases, the user has the same local system account name and principal name in kerberos. and the two passwords are the same.

What is wrong? What is the correct PAM configuration files for auth, account, password and session.

And is it possible to authenticate a user who only appears in kerberos but NOT in local system? It seems to me pam_krb5.so checks user info with local uid/gid?

Thanks!

Last edited by licht; 07-24-2007 at 06:36 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
passwordless OpenSSH with MIT-Kerberos and PAM dbalsige Linux - Software 1 11-12-2009 01:12 PM
suse9.1client W2k ADS kerberos and pam fatcake Linux - Networking 1 06-09-2005 02:27 AM
Active Directory, Kerberos, LDAP, PAM, and nsswitch PenguinPwrdBox Linux - Security 1 06-04-2005 10:56 PM
PAM/Kerberos authentication problem hmartin216 Linux - Security 2 03-11-2005 10:28 PM
Kerberos and PAM jimrt Linux - General 2 09-26-2003 07:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration