Re: PAM configuration to allow passwords from both Unix and Kerberos

2011-12-13 Thread Volodymyr Kostyrko
12.12.2011 20:35, Matt Mullins wrote: On Mon, Dec 12, 2011 at 1:40 AM, Volodymyr Kostyrko wrote: 10.12.2011 04:22, Matt Mullins wrote: auth optional pam_deny.so auth sufficient pam_unix.so no_warn try_first_pass auth sufficient pam_krb5.so no_warn try_first_pass Why you just haven't chang

Re: PAM configuration to allow passwords from both Unix and Kerberos

2011-12-12 Thread Matt Mullins
On Mon, Dec 12, 2011 at 1:40 AM, Volodymyr Kostyrko wrote: > 10.12.2011 04:22, Matt Mullins wrote: >> auth optional   pam_deny.so >> auth sufficient pam_unix.so no_warn try_first_pass >> auth sufficient pam_krb5.so no_warn try_first_pass > > > Why you just haven't changed the last line to `require

Re: PAM configuration to allow passwords from both Unix and Kerberos

2011-12-12 Thread Volodymyr Kostyrko
10.12.2011 04:22, Matt Mullins wrote: For my systems, the canonical source of authentication information is a Kerberos server, but I also want to support old-fashioned Unix passwords for a handful of users (including myself) just in case the Kerberos system is unreachable. I'm having a bit of tr

PAM configuration to allow passwords from both Unix and Kerberos

2011-12-09 Thread Matt Mullins
For my systems, the canonical source of authentication information is a Kerberos server, but I also want to support old-fashioned Unix passwords for a handful of users (including myself) just in case the Kerberos system is unreachable.  I'm having a bit of trouble adjusting to the semantics of Free