Bug#664596: User seems to missing ability to login via ssh/console after some days
[Petter Reinholdtsen]
> Anyone got any ideas how to properly fix this?
I suspect this patch will solve it for first time installations. We
need to figure out how to fix it for existing installations too.
Index: share/debian-edu-config/tools/kerberos-kdc-init
===================================================================
--- share/debian-edu-config/tools/kerberos-kdc-init (revisjon 77105)
+++ share/debian-edu-config/tools/kerberos-kdc-init (arbeidskopi)
@@ -237,8 +237,9 @@
kadmin.local -q "ktadd -k /etc/krb5.keytab.smtp smtp/tjener.intern"
chown Debian-exim:Debian-exim /etc/krb5.keytab.smtp
- # Kerberos policy setup
- kadmin.local -q "addpol -maxlife \"2 days\" -minlength 5 users"
+ # Kerberos policy setup. Make sure passwords never expire, as
+ # long as LDAP and Samba passwords do not expire.
+ kadmin.local -q "addpol -maxlife never -minlength 5 users"
kadmin.local -q "addpol -minclasses 2 hosts"
}
Anyone know why the -maxlife "2 days" were there in the first place?
--
Happy hacking
Petter Reinholdtsen
Reply to: