PAM and arla

[Assar Westerlund]

Herbert Huber <Herbert.Huber at lrz-muenchen.de> writes:
> auth     sufficient     /lib/security/pam_linux_afs.so try_first_pass
> ignore_root setpag

I believe the `setpag' option here means that the PAM module will call
setpag?

> Using this configuration, the token is not passed to the user during
> login. Without the setpag option one  sees that the token is granted to
> root.

Assuming that root has a PAG when running this, this is the expected
behavior.  If root doesn't have a PAG, the user's tokens should get
indexed by uid instead.

/assar