Linux-PAM supports -prefix everywhere, but it simply means "ignore nonexistent modules instead of warning". (Therefore it doesn't make sense on distros where pam_systemd is guaranteed to exist.)
However, the dash prefix never ignores errors returned by the module itself – that's what the 'optional' field is for. On Sat, Apr 29, 2017, 14:30 Lennart Poettering <lenn...@poettering.net> wrote: > On Sat, 29.04.17 13:25, Vlad (vo...@vovan.nl) wrote: > > > Lennart, > > > > I've just tried your suggestion as well, but it doesn't change behavior. > > I'm just wondering how it would be possible to investigate the error. > > The message "user@xxx.service: Failed at step PAM spawning > > /usr/lib/systemd/systemd: Operation not permitted" isn't very > > descriptive. I enabled debug for pam_systemd, but it doesn't give useful > > information in my case. > > Well, I figure you should look for PAM level debugging, not > systemd level debugging for this. Contact the PAM community for help > on that. > > But do note again that distros vary greatly on PAM, and while "-" is > typically used on Fedora-based distros, IIRC other distros don't know > or use that concept. Please ask your distro for help. > > Lennart > > -- > Lennart Poettering, Red Hat > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > https://lists.freedesktop.org/mailman/listinfo/systemd-devel > -- Mantas Mikulėnas <graw...@gmail.com> Sent from my phone
_______________________________________________ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel