Package: libpam-ccreds
Version: 1-6
Severity: important

Hey, it seems I can't use xscreensaver together with libpam-ccreds.
When I type in my password xscreensaver will not unlock the screen and
this is printed in auth.log:

Mar 24 15:09:23 laptop5 xscreensaver: (pam_unix) authentication failure; 
logname= uid=516 euid=516 tty=:0.0 ruser= rhost=  user=root
Mar 24 15:09:26 laptop5 xscreensaver[1086]: FAILED LOGIN 1 ON DISPLAY ":0.0", 
FOR "weinholt"
Mar 24 15:09:30 laptop5 xscreensaver[1086]: pam_ccreds: failed to open cached 
credentials "/var/cache/.security.db": Permission denied

I found a reference to this problem here:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=151914

I tried the patch provided in that bug report, but for some reason it
didn't make the problem go away. Maybe it's not the same problem? This
is what my configuration looks like:

Relevant lines from nsswitch.conf:

passwd:         files ldap [NOTFOUND=return] db
group:          files ldap [NOTFOUND=return] db
shadow:         files ldap

This is my common-auth file:

auth [user_unknown=ignore authinfo_unavail=ignore success=1 default=2] 
pam_unix.so
auth [default=done]     pam_ccreds.so action=validate use_first_pass
auth [default=done]     pam_ccreds.so action=store
auth required           pam_ccreds.so action=update
auth required           pam_deny.so

common-account:

account [user_unknown=ignore authinfo_unavail=ignore default=done] pam_unix.so
account [default=done] pam_permit.so

/etc/pam.d/xscreensaver simply includes common-auth.

I'm using nss-updatedb, libnss-db, libnss-ldap, libpam-ldap, and
libpam-ccreds with the hope that everything will still work when the
LDAP server is unreachable.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-1-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libpam-ccreds depends on:
ii  libc6                         2.3.6-4    GNU C Library: Shared libraries an
ii  libdb4.3                      4.3.29-5   Berkeley v4.3 Database Libraries [
ii  libgcrypt11                   1.2.2-1    LGPL Crypto library - runtime libr
ii  libgpg-error0                 1.2-1      library for common error values an
ii  libpam0g                      0.79-3.1   Pluggable Authentication Modules l

libpam-ccreds recommends no packages.

-- no debconf information

-- 
Göran Weinholt <[EMAIL PROTECTED]>
Debian developer, sysadmin, netadmin

Reply via email to