Hi Guys :

I am playing around with LTSP (Linux Terminal Server) and PAM for the first time. I 
got PAM working to the point that it authenticates a user at a Novell eDir box. 
HOwever after the authentication it tries to add the user locally (= LTSP server) 
which is :
1. not needed
2. not working

>From the secure.log
Mar 25 09:07:47 linuxtse pam_ncp_auth[28252]: using server LTSPTEST ctxs CC group 
(null)
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: nw_create_verify_conn_to_tree: trying to 
resolve  Test1.CC
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: trying to login as Test1.CC
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: User Test1.CC was successfully 
authorized by NDS server LTSPTEST on tree LINUX_TREE
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: Auth OK
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: User has DN Test1.CC
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: start of NW home dir got 
LTSPTEST_VOL1.CC \Home\Test1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: got LTSPTEST VOL1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: end of NW home dir
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: using location attribute
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: NWCCGetConnInfo(NWCC_INFO_TREE_NAME) 
returned LINUX_TREE
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: end of retrieve nds user info code: 
Success
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: FOUND ZF 1 in NDS
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: APPLYING ZF 0 OFF
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: USING ZF 1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: testing remote acces PAM_TTY is :0
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: local acces OK to :0
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: NW_UPDATE_USER: 4294967295 4294967295 
(null) (null) (null)
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: NW_UPDATE_USER:creating 4294967295 
4294967295 (null) (null) (null)
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: useradd -g 100 -c  -d /home/Test1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: useradd -s /bin/bash -u 2000 -m Test1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: waitpid: Fatal: No child processes
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: Cannot create user Test1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: return value of update_user_info  -12 
for Test1
Mar 25 09:07:48 linuxtse pam_ncp_auth[28252]: final PAM retval 7
Mar 25 09:07:50 linuxtse gdm-binary[28252]: Couldn't authenticate user

Anyone knows how to avoid this user creation on the LTSP box?
The user (if not existing) should be created on the fly on the Novell server.

My line (1 line no wrap) in pam.d that triggers all this looks like :

auth sufficient /lib/security/pam_ncp_auth.so -zA -A -d -l -u2000,4000,pn,gcds 
ndsserver=LTSPTEST:CC

All suggestions much appreciated.

Pete

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca

Reply via email to