[login]

Each tag in the [login] section of the file is an option for login.krb5. This section may contain any of the following relations:

krb5_get_tickets

Indicate whether or not to use a user's password to get V5 tickets. The default value is true.

krb4_get_tickets

Indicate whether or not to user a user's password to get V4 tickets. The default value is false.

krb4_convert

Indicate whether or not to use the Kerberos conversion daemon to get V4 tickets. The default value is false. If this is set to false and krb4_get_tickets is true, then login will get the V5 tickets directly using the Kerberos V4 protocol directly. This does not currently work with non-MIT-V4 salt types (such as the AFS3 salt type). Note that if this is set to true and krb524d is not running, login will hang for approximately a minute under Solaris, due to a Solaris socket emulation bug.

krb_run_aklog

Indicate whether or not to run aklog. The default value is false.

aklog_path

Indicate where to find aklog. The default value is $(prefix)/bin/aklog.

accept_passwd

A true value will cause login not to accept plaintext passwords. The default value is false. This is not yet implemented.