Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[pam_krb5 / afs] Long delay on su
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Unsupported Software
View previous topic :: View next topic  
Author Message
Mr. Tao
Tux's lil' helper
Tux's lil' helper


Joined: 20 Jul 2007
Posts: 147

PostPosted: Fri Aug 01, 2008 10:21 am    Post subject: [pam_krb5 / afs] Long delay on su Reply with quote

When I do su it takes 15-20 seconds to proceed. Login as root from login shell doesn't suffer from this problem.
My home dir is on AFS and I'm authenticating users against kerberos. It's not crucial but it's annoying - any ideas :? ?
/etc/pam.d/system-auth:
auth      required      pam_env.so
auth      sufficient      pam_krb5.so
auth      optional      pam_afs_session.so program=/usr/bin/aklog
auth      sufficient      pam_ssh.so
auth      required      pam_unix.so try_first_pass likeauth nullok
 
account   sufficient      pam_krb5.so
account   required      pam_unix.so
 
password      required   pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3
password      sufficient   pam_krb5.so use_authtok ignore_root
password      required   pam_unix.so try_first_pass use_authtok nullok md5 shadow
 
session   required   pam_limits.so
session   optional   pam_krb5.so ignore_root debug
session   required   pam_afs_session.so program=/usr/bin/aklog
session   required   pam_env.so
session   optional   pam_mktemp.so
session   optional   pam_ssh.so
session   required   pam_unix.so
session   optional   pam_permit.so
Back to top
View user's profile Send private message
depontius
Advocate
Advocate


Joined: 05 May 2004
Posts: 3383

PostPosted: Fri Aug 01, 2008 1:40 pm    Post subject: Reply with quote

You might also want to post /etc/pam.d/su for this topic. (I have no useful suggestions at this time, but the pam post for su might help spark some ideas.)
_________________
.sigs waste space and bandwidth
Back to top
View user's profile Send private message
Mr. Tao
Tux's lil' helper
Tux's lil' helper


Joined: 20 Jul 2007
Posts: 147

PostPosted: Sat Aug 02, 2008 5:04 pm    Post subject: Reply with quote

Thanks for idea. So far I haven't made any modification to any other pam files except for system-auth, so mine su file looks like this:
/etc/pam.d/su:
#%PAM-1.0
auth      sufficient      pam_rootok.so

# If you want to restrict users begin allowed to su even more,
# create /etc/security/suauth.allow (or to that matter) that is only
# writable by root, and add users that are allowed to su to that
# file, one per line.
#auth   required      pam_listfile.so item=ruser sense=allow onerr=fail file=/etc/security/suauth.allow

# Uncomment this to allow users in the wheel group to su without
# entering a passwd.
#auth   sufficient      pam_wheel.so use_uid trust

# Alternatively to above, you can implement a list of users that do
# not need to supply a passwd with a list.
#auth   sufficient      pam_listfile.so item=ruser sense=allow onerr=fail file=/etc/security/suauth.nopass

# Comment this to allow any user, even those not in the 'wheel'
# group to su
auth      required      pam_wheel.so use_uid

auth      include      system-auth

account   include      system-auth

password   include      system-auth

session   include      system-auth
session   required      pam_env.so
session   optional      pam_xauth.so
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Unsupported Software All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum