Ubuntu
libpam-krb5 package

  1. Bug #536930
  2. Comment #4

Comment 4 for bug 536930

Revision history for this message
Russ Allbery (rra-debian) wrote : Re: [Bug 536930] Re: Password changing fails when "krb5" pam-config is not first

"Daniel Richard G." <email address hidden> writes:

> Russ, there was no Launchpad weirdness going on; I filed the bug against
> kerberos-configs, since I thought that's where Kerberos-config-related
> bugs were supposed to go. (E.g. bug #369575 was moved there.) But of
> course, it concerns a file in the libpam-krb5 package.

Oh, okay. kerberos-configs is actually a regular source package that
provides the package krb5-config. It's only responsible for
/etc/krb5.conf and the logic to generate it, not for other configuration.

> What was the fix, then? Was it a code issue, or should the config have
> used one of the other options?

It wa a code issue. pam-krb5 had an incorrect implementation of
use_authtok due to my misunderstanding of the Linux PAM documentation,
which was fixed in 4.0 by changing the meaning of several options to more
closely match the intended behavior.

--
Russ Allbery (<email address hidden>) <http://www.eyrie.org/~eagle/>