Re: LUG: ssh X11 forwarding problems - Tue, 19 Oct 2004 13:41:51 -0400

Subject : Re: LUG: ssh X11 forwarding problems

From : Jack Neely <jjneely@pams.ncsu.[redacted]>

Date : Tue, 19 Oct 2004 13:41:51 -0400

On Tue, Oct 19, 2004 at 01:22:56PM -0400, gyuhasz@ncsu.[redacted] wrote:
>
> Hello,
>
> I am having difficulties with a linux machine I maintain for myself and my advisor on campus.
>
> I am running fedora core 1 with realmkit and am experiencing to following problem.
>
> Whenever someone attempts is ssh into the machine from an X terminal without turning off X11 forwarding, they are locked out and receive a message saying the .Xauthority file could not be over written. The user is then logged in without access to their home/unity directory. The log messages indicate that the appropriate afs tokens could not be obtained. The problem is rectified by running kreset.
>
> I realize that their is probably a problem with my afs setup but I do not know how to fix this problem. I am hoping someone has had this situation before and knows how to fix it. I would also prefer to not install fedora core 2 at this time.
>
> Thank you for your help in advance.
>
> George Yuhasz
>

What does the following files look like:

/etc/pam.d/sshd
/etc/pam.d/system-auth
/etc/pam.d/remote-auth

I'm thinking that your PAM setup is not right which prevents the login
process from obtaining your kerberos/afs credintials.

Jack Neely

--
Jack Neely <slack@quackmaster.[redacted]>
Realm Linux Administration and Development
PAMS Computer Operations at NC State University
GPG Fingerprint: 1917 5AC1 E828 9337 7AA4 EA6B 213B 765F 3B6A 5B89