[Samba] Confusion about libpam-krb5 and libpam-winbind

Jonathon Reinhart jonathon.reinhart at gmail.com
Thu Feb 17 13:16:48 UTC 2022


On Thu, Feb 17, 2022, 05:36 Rowland Penny via samba <samba at lists.samba.org>
wrote:

> >
> > libpam-krb5 would enable me to use kerberos tickets to access the
> > file
> > shares (and possibly ssh?).
>
> Yes, and definitely ssh
>

AFAIK libpam_krb5 is not necessary or involved in Kerberos-enabled SSH.
Instead, one enables GSSAPI in sshd_config. The libpam_krb5 module is for
logging in with plaintext credentials that are authenticated via kerberos.

Jonathon

>


More information about the samba mailing list