Re: pam_krb5+Debian's login+telnet breaks!

[Brian May <bam@snoopy.apana.org.au>]

>>>>> "Johan" == Johan Danielsson <joda@pdc.kth.se> writes:

    Johan> Brian May <bam@snoopy.apana.org.au> writes:
    >> My guess is that this is a bug in Debian's login, as it doesn't
    >> understand that the user is already logged in. I don't
    >> understand how it would work with pam_unix though.

    Johan> Does it (Debian login) dtrt with -f?

dtrt?

Heimdal's telnetd passes the -f parameter to login:

/bin/login -h 202.12.87.129 -p -f -- bam

without the -f parameter, everything works, but I get asked for my
password again.

pam_krb5 logs the following (with debug enabled):

Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): entry: Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): pam_get_data(): No module specific data is present
Nov 19 09:48:50 snoopy login[2891]: pam_krb5: pam_sm_setcred(login bam): exit: failure
Nov 19 09:48:50 snoopy login[2891]: Authentication service cannot retrieve user credentials
-- 
Brian May <bam@snoopy.apana.org.au>