in openpam_dispatch(): calling pam_sm_authenticate() in pam_krb5.so in pam_get_user(): entering in pam_get_item(): entering: PAM_USER in pam_get_item(): returning PAM_SUCCESS in pam_get_user(): returning PAM_SUCCESS in pam_sm_authenticate(): Got user: jukka in pam_get_item(): entering: PAM_RUSER in pam_get_item(): returning PAM_SUCCESS in pam_sm_authenticate(): Got ruser: (null) in pam_get_item(): entering: PAM_SERVICE in pam_get_item(): returning PAM_SUCCESS in pam_sm_authenticate(): Got service: login in pam_sm_authenticate(): Context initialised in openpam_get_option(): entering: 'forwardable' in openpam_get_option(): returning '' in openpam_get_option(): entering: 'renewable' in openpam_get_option(): returning '' in pam_sm_authenticate(): Credentials initialised in pam_sm_authenticate(): Done krb5_cc_register() in openpam_get_option(): entering: 'auth_as_self' in openpam_get_option(): returning NULL in pam_sm_authenticate(): Created principal: jukka in pam_sm_authenticate(): Done krb5_parse_name() in pam_sm_authenticate(): Got principal: jukka@EXAMPLE.ORG in pam_get_authtok(): entering in pam_get_item(): entering: PAM_OLDAUTHTOK in pam_get_item(): returning PAM_SUCCESS in openpam_get_option(): entering: 'try_first_pass' in openpam_get_option(): returning '' in pam_get_item(): entering: PAM_AUTHTOK in pam_get_item(): returning PAM_SUCCESS in openpam_get_option(): entering: 'use_first_pass' in openpam_get_option(): returning NULL in openpam_get_option(): entering: 'echo_pass' in openpam_get_option(): returning NULL in pam_vprompt(): entering in pam_get_item(): entering: PAM_CONV in pam_get_item(): returning PAM_SUCCESS in openpam_ttyconv(): entering in openpam_ttyconv(): returning PAM_SUCCESS in pam_vprompt(): returning PAM_SUCCESS in pam_set_item(): entering: PAM_AUTHTOK in pam_set_item(): returning PAM_SUCCESS in pam_get_item(): entering: PAM_AUTHTOK in pam_get_item(): returning PAM_SUCCESS in pam_get_authtok(): returning PAM_SUCCESS in pam_sm_authenticate(): Got password in pam_sm_authenticate(): Done getpwnam_r() in pam_sm_authenticate(): Got TGT in pam_sm_authenticate(): Credentials stashed in openpam_get_option(): entering: 'debug' in openpam_get_option(): returning '' in pam_sm_authenticate(): Credentials stash verified in pam_get_data(): entering: 'ccache' in pam_get_data(): returning PAM_NO_MODULE_DATA in pam_sm_authenticate(): Credentials stash not pre-existing in pam_set_data(): entering: 'ccache' in pam_set_data(): returning PAM_SUCCESS in pam_sm_authenticate(): Credentials stash saved in pam_sm_authenticate(): Done cleanup in pam_sm_authenticate(): Done cleanup2 in pam_sm_authenticate(): Done cleanup3 in openpam_dispatch(): pam_krb5.so: pam_sm_authenticate(): success in openpam_dispatch(): calling pam_sm_setcred() in pam_krb5.so in openpam_get_option(): entering: 'no_ccache' in openpam_get_option(): returning NULL in pam_sm_setcred(): Establishing credentials in pam_get_item(): entering: PAM_USER in pam_get_item(): returning PAM_SUCCESS in pam_sm_setcred(): Got user: jukka in pam_sm_setcred(): Context initialised in pam_sm_setcred(): Got euid, egid: 0 1000 in pam_get_data(): entering: 'ccache' in pam_get_data(): returning PAM_SUCCESS in pam_sm_setcred(): Done getpwnam_r() in pam_sm_setcred(): Done setegid() & seteuid() in openpam_get_option(): entering: 'ccache' in openpam_get_option(): returning NULL in pam_sm_setcred(): Got cache_name: FILE:/tmp/krb5cc_1000 in pam_sm_setcred(): Cache initialised in pam_sm_setcred(): Prepared for iteration in pam_sm_setcred(): Iteration in pam_sm_setcred(): Iteration in pam_sm_setcred(): Done iterating in pam_sm_setcred(): stat(/tmp/krb5cc_1000): mode 100600, uid 1000, gid 0 in pam_sm_setcred(): chown(/tmp/krb5cc_1000, 1000, 1000) as euid:egid 1000:1000 (uid:gid 0:1000) in pam_sm_setcred(): Done chown() in pam_sm_setcred(): Done chmod() in pam_sm_setcred(): Cache closed in pam_setenv(): entering in pam_putenv(): entering in openpam_findenv(): entering in openpam_findenv(): returning -1 in pam_putenv(): returning PAM_SUCCESS in pam_setenv(): returning PAM_SUCCESS in pam_sm_setcred(): Environment done: KRB5CCNAME=FILE:/tmp/krb5cc_1000 in pam_sm_setcred(): Done cleanup2 in pam_sm_setcred(): Done cleanup3 in pam_sm_setcred(): Done seteuid() & setegid() in openpam_dispatch(): pam_krb5.so: pam_sm_setcred(): success