[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#407754: openssh-server: GSSAPICleanupCredentials doesn't, unless PrivilegeSeparation is enabled

Brendan Cully <brendan@kublai.com> writes:

> Package: openssh-server
> Version: 4.3p2-8

> It seems that GSSAPI credentials are not cleaned up unless
> PrivilegeSeparation is enabled. I prefer to keep that off so that I can
> use pam_krb5 keyboard-interactive authentication when I don't already
> have keys.

pam_krb5 keyboard-interactive should work fine with privilege separation
enabled with the libpam-krb5 in etch.  Please let me know if it doesn't.

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: