[Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268186

--- Comment #4 from Cy Schubert <cy@FreeBSD.org> ---
You can circumvent Heimdal with MIT by pkg install pam_krbt krb5.

Then replace the pam_krb5 lines in /etc/pam.d/sshd with the following:

auth            sufficient      /usr/local/lib/security/pam_krb5.so            
try_first_pass
account         sufficient      /usr/local/lib/security/pam_krb5.so
password        sufficient      /usr/local/lib/security/pam_krb5.so

sshd will use MIT instead of the built-in Heimdal.

-- 
You are receiving this mail because:
You are the assignee for the bug.