[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: pam_krb5+Debian's login+telnet breaks!
>>>>> "Johan" == Johan Danielsson <joda@pdc.kth.se> writes:
Johan> Brian May <bam@snoopy.apana.org.au> writes:
>> My guess is that this is a bug in Debian's login, as it doesn't
>> understand that the user is already logged in. I don't
>> understand how it would work with pam_unix though.
Johan> Does it (Debian login) dtrt with -f?
dtrt?
Heimdal's telnetd passes the -f parameter to login:
/bin/login -h 202.12.87.129 -p -f -- bam
without the -f parameter, everything works, but I get asked for my
password again.
pam_krb5 logs the following (with debug enabled):
Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): entry: Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): pam_get_data(): No module specific data is present
Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): exit: failure
Nov 19 09:48:50 snoopy login[2891]: Authentication service cannot retrieve user credentials
--
Brian May <bam@snoopy.apana.org.au>