[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#664596: User seems to missing ability to login via ssh/console after some days



[Petter Reinholdtsen]
> Anyone got any ideas how to properly fix this?

I suspect this patch will solve it for first time installations.  We
need to figure out how to fix it for existing installations too.

Index: share/debian-edu-config/tools/kerberos-kdc-init
===================================================================
--- share/debian-edu-config/tools/kerberos-kdc-init     (revisjon 77105)
+++ share/debian-edu-config/tools/kerberos-kdc-init     (arbeidskopi)
@@ -237,8 +237,9 @@
     kadmin.local -q "ktadd -k /etc/krb5.keytab.smtp smtp/tjener.intern"
     chown Debian-exim:Debian-exim /etc/krb5.keytab.smtp
 
-    # Kerberos policy setup
-    kadmin.local -q "addpol -maxlife \"2 days\" -minlength 5 users"
+    # Kerberos policy setup.  Make sure passwords never expire, as
+    # long as LDAP and Samba passwords do not expire.
+    kadmin.local -q "addpol -maxlife never -minlength 5 users"
     kadmin.local -q "addpol -minclasses 2 hosts"
 }
 

Anyone know why the -maxlife "2 days" were there in the first place?
-- 
Happy hacking
Petter Reinholdtsen



Reply to: