On Tue, 2011-10-04 at 13:01 +0400, Sergey Urushkin wrote: > Hi. Is it possible to use GSSAPI authentication and deny passdb > together? Seems it doesn't work as I expect: GSSAPI doesn't check deny > passdb, so I'm not able to restrict access to GSSAPI-users.
GSSAPI doesn't use any passdbs, so it doesn't work. It would be nice to change this some day (so e.g. proxying would also be possible with GSSAPI auth), but for now it's a rather low priority for me.
