Bug#407754: openssh-server: GSSAPICleanupCredentials doesn't, unless PrivilegeSeparation is enabled
Brendan Cully <brendan@kublai.com> writes:
> Package: openssh-server
> Version: 4.3p2-8
> It seems that GSSAPI credentials are not cleaned up unless
> PrivilegeSeparation is enabled. I prefer to keep that off so that I can
> use pam_krb5 keyboard-interactive authentication when I don't already
> have keys.
pam_krb5 keyboard-interactive should work fine with privilege separation
enabled with the libpam-krb5 in etch. Please let me know if it doesn't.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: