SUMMARY: Kerberos question

From: Tonny Verberk <>
Date: Wed Jul 24 2002 - 02:53:15 EDT
Dear managers,

Special thanks to Mathieu Nantel who came up with the answer:

This is a known issue from Sun. They fixed it in Solaris 9, and they will
supply the functional pam libraries on demand. The kerberos pam modules that
come with solaris 8 are flat out broken. And the open source version isn't
any better. I got a full environment working with the fixed one, and so far
so good.

Mathieu provided me with new pam modules and now everything works fine.

>>Dear managers,
>>I have configured Kerberos on my solaris 8 station. Everything works fine
>>exept for ONE thing:
>>When I lock my station and type my password and if it's oke than it opens
>>my desktop. Now when I mistype my password (happens sometimes) than Kerberos
>>asks me to type it again, so far so good. But when I now type my password
>>again (correct this time) it opens my desktop and before I can do anything
>>it logs me off.
>>Has anyone seen and corrected this behavioure?
>>My /etc/pam.conf file looks like:
>># All Rights Reserved.
>># PAM configuration
>># Authentication management
>>login   auth sufficient /usr/lib/security/$ISA/ debug
>>login   auth optional   /usr/lib/security/$ISA/ use_first_pass 
>>ktelnet auth required   /usr/lib/security/$ISA/ acceptor debug
>>krlogin auth required   /usr/lib/security/$ISA/ acceptor debug
>>krsh    auth required   /usr/lib/security/$ISA/ acceptor debug
>>other   auth required   /usr/lib/security/$ISA/ debug
>># Account management.
>>other   account requisite       /usr/lib/security/$ISA/
>>other   account required        /usr/lib/security/$ISA/
>># Session management.
>>other   session required        /usr/lib/security/$ISA/
>># Password management.
>>other   password required       /usr/lib/security/$ISA/
>>Tonny Verberk.                          
>>Tel Nr : (+31 40 27)32071
>>E-mail :


Tonny Verberk.                          
Tel Nr : (+31 40 27)32071
E-mail :
sunmanagers mailing list
Received on Wed Jul 24 03:11:10 2002

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:42:50 EST