OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
OFF-TOPIC: xdm/gdm linux + openbsd 4.2 Kerberos KDC (i am losing my hairs)

From: John Nietzsche (john.nietzschegmail.com)
Date: Fri Feb 01 2008 - 06:41:42 CST


Dear folks,

i am losing my hear. I am in need to get a gentoo linux desktop (note:
running garbage stuff like linux is not my choice but a user
requirement) to authenticate through kerberos. For now i could do it
only on console tty and sshd server. But when i try to auth in the
local xdm/gdm they fails to do so.

Does anybody have any idea on how to handle such?

The only thing necessary to have console tty and sshd working was:

etoshaetosha /etc/pam.d $ cat system-auth
#%PAM-1.0

auth required pam_env.so
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_krb5.so use_first_pass debug
auth required pam_deny.so

account required pam_unix.so

password required pam_cracklib.so difok=2 minlen=8 dcredit=2
ocredit=2 try_first_pass retry=3
password sufficient pam_unix.so try_first_pass use_authtok nullok md5 shadow
password required pam_deny.so

session required pam_limits.so
session required pam_unix.so

How to get xdm/gdm ?

Thanks a lot for your time and cooperation.

Best regards.