Bug 363980

Summary: yast2-kerberos-client write invalid configuration values in /etc/krb5.conf - pam section
Product: [openSUSE] openSUSE 11.0 Reporter: Michael Calmer <mc>
Component: YaST2Assignee: Jiří Suchomel <jsuchome>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Normal    
Priority: P5 - None    
Version: Alpha 2   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Michael Calmer 2008-02-22 12:21:18 UTC 
yast2-kerberos-client-2.16.3-3

I tried to configure kerberos on 11.0 Alpha 2 (+ new yast2-kerberos-client module) . After the configuration is finished I have this in /etc/krb5.conf

[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = false
                minimum_uid = 1
                clockskew = 300
                external = sshd
                ignore_unknown = true
                ssh_support = true
                use_shmem = sshd
        }

"ignore_unknown" and "ssh_support" are no valid parameter.

ignore_unknown should be ignore_unknown_principals
Don't know what ssh_support should be.
Comment 1 Jiří Suchomel 2008-02-22 12:35:27 UTC 
ignore_unknown_principals is not configured in pam section, it is handled by pam-config.

So neither of those keys should end there, they are actually internal variables.
Comment 2 Jiří Suchomel 2008-02-22 12:58:28 UTC 
yast2-kerberos-client-2.16.4