search for: createntials

...Severity: enhancement Priority: P5 Component: Kerberos support Assignee: unassigned-bugs at mindrot.org Reporter: hedrick at rutgers.edu Most current implementations for Kerberos use collections for credentials, e.g. KEYRING or KCM. E.g. we have our default createntials set to KEYRING:persistent:%{uid} in krb5.conf. When I login, that should result in KRB5CCNAME being set to KEYRING:persistent:1003. When I ssh and go through PAM, that's what I get. But if I have a current Kerberos credential, sshd won't invoke PAM for authentication. It will set up KRB5CCN...