[login]
Each tag in the [login] section of the file is an option for
login.krb5. This section may contain any of the following relations:
- krb5_get_tickets
- Indicate whether or not to use a user's password to get V5 tickets.
The default value is true.
- krb4_get_tickets
- Indicate whether or not to user a user's password to get V4 tickets.
The default value is false.
- krb4_convert
- Indicate whether or not to use the Kerberos conversion daemon to get V4
tickets. The default value is false. If this is
set to false and krb4_get_tickets is true, then login will get the V5
tickets directly using the Kerberos V4 protocol directly. This does
not currently work with non-MIT-V4 salt types (such as the AFS3 salt
type). Note that if this is set to true and krb524d is not running,
login will hang for approximately a minute under Solaris, due to a
Solaris socket emulation bug.
- krb_run_aklog
- Indicate whether or not to run aklog. The default value is
false.
- aklog_path
- Indicate where to find aklog. The default value is
$(prefix)/bin/aklog.
- accept_passwd
- A true value will cause login not to accept plaintext passwords. The
default value is false. This is not yet
implemented.