Russ Allbery wrote: > "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> writes: > >> Prior to this version, we were able to employ an entry in >> /etc/pam.d/common-account which was: >> >> account [default=bad success=ok user_unknown=ignore service_err=ignore >> system_err=ignore] /lib/security/pam_krb5.so >> >> upgrade to 3.11-1 led to failure of accounts to log in in runlevel != 1 >> >> commentling out the line for pam_krb allows log in, but we have not >> identified how we can use this in account. > > Add ignore=ignore to your configuration line and see if that helps. I > think it's currently being caught by your default line. >
the line (sorry for line-wrap): account [default=bad success=ok user_unknown=ignore service_err=ignore system_err=ignore ignore=ignore] /lib/security/pam_krb5.so does work ok. thanks. sb. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
