Scientific Linux Security Update : pam_krb5 on SL3.x i386/x86_64
High Nessus Plugin ID 60460
SynopsisThe remote Scientific Linux host is missing a security update.
DescriptionThese updated pam-krb5 packages fix a bug which caused user authentication to fail under certain circumstances. When authenticating a user, if the user's password was expired, the module would attempt to obtain password-changing credentials in order to verify the user's password. When the module was configured to validate credentials, it would incorrectly attempt to validate the password-changing credentials, which cannot be validated in the way that a ticket-granting ticket can. In these updated packages, an exception is made in this case, thus resolving the issue.
SolutionUpdate the affected pam_krb5 package.