On 02/13/2013 11:29 AM, Daniel Frey wrote:
> I updated my "server" a while back, and just recently I noticed this in
> /var/log/messages:
> 
> Feb 13 11:26:14 coretwoduo login[25575]: pam_tally2(login:auth):
> pam_get_uid; no such user
> 
> I have thousands of entries in my logs. It doesn't seem to  prevent me
> from logging in though.
> 
> I have figured out that it's looking for a user 'auth'? I don't see that
> on my system.
> 
> Is this a misconfiguration of pam? Or update gone wonky? I've never seen
> this before.

For sure there is no user named auth on my machines, so something must be
wrong somewhere.  Just for fun I ran "emerge -p /etc/pam.d/ and got this:

#emerge -p /etc/pam.d/

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] sys-auth/pambase-20120417-r1 
[ebuild   R    ] sys-apps/shadow-4.1.5.1-r1 
[ebuild   R    ] net-mail/mailbase-1.1 
[ebuild   R    ] app-admin/sudo-1.8.6_p6 
[ebuild   R    ] sys-auth/polkit-0.110 
[ebuild   R    ] sys-apps/openrc-0.11.8 
[ebuild   R    ] net-print/cups-1.6.1 
[ebuild   R    ] net-misc/openssh-6.1_p1-r1 
[ebuild   R    ] net-fs/samba-3.6.12 

I mention this mostly because I learned very recently that emerge will
accept a directory name and rebuild all of the packages that install
files there.  Maybe it won't help you but I'm looking for any excuse
to use that new trick :)  (Some wise gentooer posted that revelation
here in the last month or so and I can't recall who it was, sorry.)

Reply via email to