bin/64464: pam_krb5 module ignores no_ccache option
Eric van Gyzen
vangyzen at stat.duke.edu
Fri Mar 19 08:10:06 PST 2004
>Number: 64464
>Category: bin
>Synopsis: pam_krb5 module ignores no_ccache option
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri Mar 19 08:10:05 PST 2004
>Closed-Date:
>Last-Modified:
>Originator: Eric van Gyzen
>Release: FreeBSD 5.2-RELEASE i386
>Organization:
Duke University Statistics
>Environment:
FreeBSD 5.2-RELEASE
>Description:
The Kerberos 5 PAM module (src/lib/libpam/modules/pam_krb5/pam_krb5.c)
ignores the no_ccache option and always saves the credentials in a file.
>How-To-Repeat:
For example, configure ports/mail/imap-uw to authenticate with Kerberos.
In /etc/pam.d/imap, put:
auth required pam_nologin.so no_warn
auth required pam_krb5.so no_warn try_first_pass no_ccache
Contrary to the pam_krb5(8) man page, a credentials cache will be saved
in /tmp/krb5cc_%d.
>Fix:
I'm not familiar enough with PAM and Kerberos to provide a fix. :(
Maybe in my "spare time"...
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-bugs
mailing list