On Wed, 2009-01-07 at 08:13 +0000, Steve Langasek wrote:
> For comparison, here's the /usr/share/pam-configs/krb5 I've been using
> locally for testing:
Looks fairly similar. There seems to be a difference of "<section>" and
"<section>-Final" between our two. I'm not sure how significant that is
though.
> Bryan, does this config look like it's compatible with your setup?
TBH, my config is purely a config-by-example. I would defer to your
knowledge in this situation.
> Could you test that it works in your environment, in which case I'll
> upload it to jaunty?
Seems to work.
> BTW, I've never needed to use the pam_krb5 session module. As far as
> I'm aware, that only exists as a workaround for services that don't call
> pam_setcred() as expected. Do you know of specific cases where this is
> needed in your environment?
Not really. See above about config-by-example. :-)
On Wed, 2009-01-07 at 08:13 +0000, Steve Langasek wrote: pam-configs/ krb5 I've been using
> For comparison, here's the /usr/share/
> locally for testing:
Looks fairly similar. There seems to be a difference of "<section>" and
"<section>-Final" between our two. I'm not sure how significant that is
though.
> Bryan, does this config look like it's compatible with your setup?
TBH, my config is purely a config-by-example. I would defer to your
knowledge in this situation.
> Could you test that it works in your environment, in which case I'll
> upload it to jaunty?
Seems to work.
> BTW, I've never needed to use the pam_krb5 session module. As far as
> I'm aware, that only exists as a workaround for services that don't call
> pam_setcred() as expected. Do you know of specific cases where this is
> needed in your environment?
Not really. See above about config-by-example. :-)
b.