Subject: xsrc/32603: xdm w/ pam_krb5 fails to store tickets
To: None <xsrc-manager@netbsd.org, gnats-admin@netbsd.org,>
From: None <tsarna@sarna.org>
List: netbsd-bugs
Date: 01/23/2006 18:20:01
>Number: 32603
>Category: xsrc
>Synopsis: xdm w/ pam_krb5 fails to store tickets
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: xsrc-manager
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Mon Jan 23 18:20:00 +0000 2006
>Originator: Ty Sarna
>Release: NetBSD 3.99.15 source date 1/21/06
>Organization:
>Environment:
System: NetBSD kohaku.sarna.org 3.99.15 NetBSD 3.99.15 (KOHAKU) #7: Sun Jan 22 19:44:31 EST 2006 tsarna@talyn.frontco.com:/usr/build/KOHAKU i386
Architecture: i386
Machine: i386
>Description:
xdm in prior versions (last I tried was 3.99.7) with pam and
kerberos used to obtain tickets, though tehre was a bug with
setting the environment variable pointing to them (see
PR#31376).
Now xdm doesn't seem to obtain credentials at all! I can log in
with my kerberos password, but I get no tickets. For users with
home on AFS, this meens they can't log in properly (no tickets
-> no tokens -> no permissions on their homedir)
I believe this is an xdm problem and not in the pam module as
xscreensaver is still able to obtain tickets and tokens on
unlock. Wether this is related to 31376 or perhaps 30326 I don't
know.
>How-To-Repeat:
Log in using kerberos password. Use klist to verify you have no
tickets. ls /tmp and notice there there are no ticket files
(it's not simply that the environment isn't pointing to them).
>Fix:
unknown.