Dňa 17. mar 2002 o 11:24, Matias Griese napísal(a):

> System uptated from 8.1 -> 8.2
> When I set the security level to 4 (higher) every account in my computer
> expires (including root) rendering the system useless. Luckily I had
> a terminal where I was root..

i reported similar problem in my lately post with subject: "msec
ignores/overrides login.defs values, and other msec".

i migrated from non-mandrake linux to mandrake, and after un-backup
passwd and shadow files this system has problem with autentication.
after my examining of problem, i found every-hour-running msec, which
logging via loger info about disabled nearly all accounts (~2000)..

i found, msec ignores unix traditional /etc/login.defs file (shadow-utils
and others too...) where is exactly listed how long is password valid,
and set another value which i must rewrite directly in msec script to
properly time. i see, this file is in shadow-utils package only for
decoration..

Frederic L. tell me this:
<cite>
To disbale password aging, use the following in

/etc/security/msec/level.local:
from mseclib import *
password_aging(99999)
</cite>

ok, this is workarround, but pam modules between "old linux system" - 8.2
is incompatible? or what another? this is still non-reply question and
possible big trouble after upgrade system to 8.2...

p.s.: i still can't found detailed info about msec and his configuration
files (level.local etc). msec is now very deeply integrated to system and
users (admins) MUST have documentation about this. cooker@ isn't good
documentatioon system;)

bye
-- 
+------------------------+---------------------------------------------+
+ Tibor "FuturE" Pittich | Email       : [EMAIL PROTECTED]
+------------------------+ HomePage    : http://c0re.phuture.sk/future
   NIC-HDL: FUTU1-RIPE     PGPkey      : finger [EMAIL PROTECTED]
+-------------------------> píšte mi v ISO-8859-2 <--------------------+

Attachment: msg60647/pgp00000.pgp
Description: PGP signature

Reply via email to