On Sat, Mar 25, 2006 at 12:50:20PM +0100, klaus ade johnstad wrote:
> Package: libpam-ccreds
> Version: 1-6
> Severity: important
> 
> I'm trying to use pam_group.so to give users groupmemebership via 
> /etc/security/group.conf and using "auth    optional        pam_group.so"  
> in /etc/pam.d/common-auth. This works very well, until I start using 
> libpam-ccreds.
> 
> In case my pam-files are totaly to blame for this, I include them here:
> auth    sufficient      pam_unix.so
> auth    [authinfo_unavail=ignore success=1 default=2] pam_ldap.so 
> try_first_pass
> auth    [default=done]  pam_ccreds.so action=validate use_first_pass
> auth    [default=done]  pam_ccreds.so action=store use_first_pass
> auth    [default=bad]  pam_ccreds.so action=update use_first_pass
> auth    optional        pam_group.so
With this setup pam_group.so is never done since the pam stack is
terminated after all of the three pam_ccreds.so calls. You should be
able to verify this with pam_warn.so.
Cheers,
 -- Guido


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to