[27202] in Kerberos
Re: Solaris 9 latest OEM SSH + pam_krb5.so.1
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Wed Jan 10 15:34:45 2007
Message-ID: <45A54D5A.7000504@kickflop.net>
Date: Wed, 10 Jan 2007 15:32:26 -0500
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <87k5zu636m.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> This may be obvious, but does the account jblaine exist on the system? It
> has to be provided by an nsswitch provider, or sshd will always reject
> logins to that account regardless of whether it passes a PAM
> authentication check.
Yes, the account exists. I am able to telnet in fine as jblaine.
> Also, note that unless the account exists in /etc/shadow (even if you're
> not using local passwords), the Unix PAM account module will reject the
> login at least in Solaris 8.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
