On Wed, Apr 14, 2004 at 04:21:05PM +1200, Andrew Tarr wrote:
> this is the auth.log stuff for a console login and an attempt at
> executing 'su':
> Apr 14 16:19:18 portia login[15663]: (pam_unix) session opened for user ajt by
> LOGIN(uid=0)
> Apr 14 16:19:20 portia su[15691]: pam_acct_mgmt: Authentication service cannot
> retrieve authentication info.
> Apr 14 16:19:20 portia su[15691]: - tty3 ajt-root
As root, try:
(assumes your user is ajt--based on auth.log above)
# getent passwd root ajt
ajt:x:1000:1000:Andrew Tarr,,,:/home/ajt:/bin/csh
root:x:0:0:root:/root:/bin/csh
# getent shadow root ajt
ajt:$1$<password_removed>:12314:0:99999:7:::
root:$1$<password_removed>:12314:0:99999:7:::
Also note that if the first three characters of the password field for
your accounts is '$1$', you should double-check that MD5 passwords are
enabled in your PAM configuration.
Also, check the permissions on /sbin/unix_chkpwd--they should be 4555.
Cheers,
-mjg
--
Matthew Gregan |/
/| [EMAIL PROTECTED]
