$Id: README,v 1.15 2003/01/18 22:17:05 lha Exp $

INTRODUCTION
kpam is an authentication module for Linux and SUN's implementations of PAM.
In addition to authenticating the user it also acquires a kerberos5 tgt
and optionally a kerberos4 tgt and/or afs tokens.

INSTALLATION
First run "autoconf && autoheader" and copy config.guess, config.sub and
install-sh to the kpam directory. This should be all you have to do to make
configure happy. Now you can run "./configure --help" to see the options,
of which some are required to build kpam.

Some notes may be in order though:
0) GNU autoconf is needed by kpam.
1) You have to have an installation of heimdal.
2) To use AFS, heimdal must have its own libkafs (requires static krb4).
3) To use krb4, you have to have an installation of kth-krb.

KPAM CONFIGURATION OPTIONS
These are the options you can pass to kpam from the PAM config file:
debug
	Enables some extra logging if compiled with the debug code.
silent
	Disables logging.
forwardable
	Acquire forwardable kerberos 5 tickets
no_afs
	Do not acquire AFS tokens even if we compiled support for it.
ignore_afs_failure
	Ignore that we did not get AFS tokens even if we tried.
afs_aquire_pag
	Aquire a AFS pag, default off, you want to turn this on
	for login and xdm, but not for xlock
no_krb4
	Do not acquire kerberos 4 tickets  even if we compiled support for it.
no_root
	Report authentication error if the pam service is running as root
	and you try to authenticate as root.
try_first_pass
	If there is a previous password, try it before prompting for user
	input.
use_first_pass
	As try_first_pass but report authentication error if the first
	password is incorrect.
realm=%s
	This sets the realm to authenticate the user in.
root_inst=%s
	This sets the instance when you authenticate to root from
	another user. Ie. You are logged in as user and try to su to
	root which gives this canonical principal "user/root_inst@realm"
	

AUTHORS

Love	Hrnquist strand	<lha@it.su.se>
Richard	Nyberg			<rnyberg@it.su.se>
Mikael	Wikstrom		<mikael.wikstrom@it.su.se>
