search for: pam_linux_af

...user''s shell; instead, it immediately closes the session and execs the user''s shell. This means that a PAM module which expects to be able to do post-session cleanup in its pam_close_session hook will do the cleanup *before* the user''s shell is invoked. This breaks the pam_linux_afs module (which invokes AFS''s unlog) and KTH Kerberos''s pam_krb4 module (which destroys the ticket cache), among others, so the session is effectively unauthenticated (contrary to both PAM documentation and users'' and administrators'' expectations). The workaround...

...ess for the user's shell; instead, it immediately closes the session and execs the user's shell. This means that a PAM module which expects to be able to do post-session cleanup in its pam_close_session hook will do the cleanup *before* the user's shell is invoked. This breaks the pam_linux_afs module (which invokes AFS's unlog) and KTH Kerberos's pam_krb4 module (which destroys the ticket cache), among others, so the session is effectively unauthenticated (contrary to both PAM documentation and users' and administrators' expectations). The workaround for pam_linux_af...