Package: libpam-modules
Version: 0.79-3.1
Severity: important
After the upgrade to 0.79-3.1, pam_rootok stopped working. This is my
/etc/pam.d/su:
auth required pam_wheel.so group=wheel
auth sufficient pam_rootok.so debug
auth required pam_unix.so
account required pam_unix.so
session required pam_unix.so
I noticed this problem when the init.d for fetchmail asked for a
password. Afterwards, I tried to do a "su - fetchmail", and this is what
appears in auth.log:
Feb 25 13:29:58 cheetah PAM-rootok[8830]: authentication succeeded
Feb 25 13:29:59 cheetah su[8830]: (pam_unix) authentication failure; logname=
uid=0 euid=0 tty=tty1 ruser=root rhost= user=fetchmail
Feb 25 13:30:01 cheetah su[8830]: pam_authenticate: Permission denied
Feb 25 13:30:01 cheetah su[8830]: FAILED su for fetchmail by root
As you can see, pam_rootok logs that the authentication succeeded, but
it doesn't work anyway. Maybe the problem is not really in pam_rootok but in
another place, I don't know. Downgrading to 0.76-22 solved the problem.
-- System Information:
Debian Release: testing/unstable
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/dash
Kernel: Linux 2.6.15-skas3-v8.2
Locale: LANG=gl:es:en, LC_CTYPE=gl:es:en (charmap=ISO-8859-1) (ignored: LC_ALL
set to gl_ES)
Versions of packages libpam-modules depends on:
ii libc6 2.3.6-1 GNU C Library: Shared libraries an
ii libcap1 1:1.10-14 support for getting/setting POSIX.
ii libdb4.3 4.3.29-4 Berkeley v4.3 Database Libraries [
ii libpam0g 0.79-3.1 Pluggable Authentication Modules l
ii libselinux1 1.28-4 SELinux shared libraries
libpam-modules recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
