Re: kerberos

[Lennert Buytenhek <buytenh gnu org>]

On Sun, 29 Oct 2000, Jeremy Katz wrote:

> > for one thing, in /var/kerberos/krb5kdc/kdc.conf, /usr/dict/words should
> > be changed to /usr/share/dict/words.
> 
> Could you please file this in bugzilla at
> http://bugzilla.redhat.com/bugzilla/ ?

Yay!!! I got bug #20000!!!! :-))


> > Furthermore.. has anyone got Kerberos in RH7 to work in a satisfying way?
> > I'm struggling with pam_krb5, so I'm just wondering whether I'm doing
> > something wrong.
> 
> It works fine here at NCSU.  You should be able to use
> /usr/sbin/authconfig to set up your PAM configuration in a meaningful
> way.  What specific problem are you having?

Basically, I can't get changing of passwords via 'passwd' right. If I look
in system-auth I see this:

password    required      /lib/security/pam_cracklib.so retry=3
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 shadow
password    sufficient    /lib/security/pam_krb5.so use_authtok
password    required      /lib/security/pam_deny.so

That means that if 'passwd' succeeds in changing my unix password, it
won't change my kerberos password, right?

Shall we take this off-list?


greetings,
Lennert