mikeizm
n00b
Joined: 28 Apr 2005
Posts: 5
|
 Posted: Fri Jul 22, 2005 5:15 pm Post subject: kerberos / pam and su login |
 |
|
Hi,
I have been able to get kerberos ssh logins working on my linux machine but when I try to su in locally, it asks me for root password for the Kerberos server that we have here.
| Code: | mike@guru mike $ su -
Password for root@SOME.EDU: |
this is what /etc/pam.d/sshd looks like
| Code: |
auth sufficient pam_stack.so service=system-auth
auth required pam_nologin.so
auth required pam_unix.so use_first_pass
auth sufficient pam_krb5.so use_first_pass
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth
session required pam_permit.so
session optional pam_console.so
|
/etc/pam.d/system-auth
| Code: |
auth required /lib/security/pam_env.so
auth sufficient /lib/security/pam_unix.so use_first_pass nullok
auth sufficient /lib/security/pam_krb5.so
auth required /lib/security/pam_deny.so
account required /lib/security/pam_unix.so
account required /lib/security/pam_krb5.so
password required /lib/security/pam_cracklib.so retry=3
password sufficient /lib/security/pam_unix.so nullok md5 shadow use_authtok
password sufficient /lib/security/pam_krb5.so
password required /lib/security/pam_deny.so
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
session optional /lib/security/pam_krb5.so
|
do i need to edit /etc/pam.d/su or do i just need to make a minor change in either or both of the above two configs? |
|
Networking & Security
