Re: Disabling login via Heimdal

[Gémes Géza <geza@kzsdabas.sulinet.hu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert Fitzpatrick írta:
| I installed the Heimdal-0.6 port under FreeBSD 5.2.1 and it seems to
| have enabled kerberos login for pam or something? When ever I restart a
| service that runs as a non-priv user, it prompts me to their kerberos
| login. For instance, if I restart amavis which runs as the 'vscan' user,
| it will prompt for the vscan@EXAMPLE.COM password. I am not ready to
| start using this as I have not setup Heimdal the way I want, yet, and
| cannot seem to find where to disable this for now. Can someone tell me
| where to look? Also, when I'm ready to enable this, do I just setup a
| service principal for that service to avoid the password prompt?
|
Hi,

I've never dealed with Heimdal on FreeBSD before, but my old FreeBSD
experience combined with my more recent Linux experience would make me
saying: look for /etc/pam.conf and the files in /etc/pam.d and comment
out every line wich has pam_krb5.so on it.
Later when you have Heimdal configured you could reenable them

Cheers,

Geza
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAab+j/PxuIn+i1pIRAh5vAJ9Iigr50uliVHmbRVJcd2igstlVWACfWuHH
CqbghgXvpTE4Zyvwe5UpHpw=
=ecDx
-----END PGP SIGNATURE-----