Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Jun 2012 12:13:27 +0300
From:      Ross <basarevych@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   sshd and Kerberos
Message-ID:  <CANmv3=xbcwE8Ork_XikYFM_NY%2BUSeUxkqJSZ8CLyGgewPojEWQ@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hello.

I setup NIS, Kerberos and Kerberized NFS (v3) server.
All the required daemons are running.

/usr/home is exported from the server with sec=krb5i

And there is a client machine. I uncommented these two lines in
/etc/pam.d/system and sshd:
auth            sufficient      pam_krb5.so             no_warn try_first_pass
password        sufficient      pam_krb5.so             no_warn try_first_pass

Now, if I do a local login to the client (on the text console)
everything works fine, I get the Kerberos tickets and have access to
mounted /usr/home

But if I ssh into the client from server I do log in, but I don't get
any ticket and access to /usr/home is denied.

How to make sshd pam module create Kerberos tickets on login?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANmv3=xbcwE8Ork_XikYFM_NY%2BUSeUxkqJSZ8CLyGgewPojEWQ>