Re: [Bug 375569] Re: gnome-screensaver failure - can't access samba password database - not running as root
On Thu, Oct 13, 2011 at 02:08:12PM -, AlainKnaff wrote: > Solution: > Remove the following lines from /usr/share/pam-configs/smbpasswd-migrate > and re-run pam-auth-update : > > Auth-Initial: > optionalpam_smbpass.so migrate > Auth-Final: > optionalpam_smbpass.so migrate Er, no. If you don't want to use this, then *don't enable the smbpasswd-migrate profile*. You should not be editing this file. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developerhttp://www.debian.org/ slanga...@ubuntu.com vor...@debian.org -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/375569 Title: gnome-screensaver failure - can't access samba password database - not running as root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/375569/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 375569] Re: gnome-screensaver failure - can't access samba password database - not running as root
> The thing is, this isn't really a bug at all. gnome-screensaver is working > exactly as it's supposed to, as is pam_smbpass; it > just logs (at severity LOG_DEBUG) a notice that the smbpasswd database is not > being updated, because the process isn't > running as root. The issue is that this is being called from each executable that uses pam, including those that don't have the right to change samba passwords, such as squid_auth, or vsftpd. The effect is not only log spam, but also authentication failures (in case of vsftpd: bug #723603). Solution: Remove the following lines from /usr/share/pam-configs/smbpasswd-migrate and re-run pam-auth-update : Auth-Initial: optionalpam_smbpass.so migrate Auth-Final: optionalpam_smbpass.so migrate -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/375569 Title: gnome-screensaver failure - can't access samba password database - not running as root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/375569/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 375569] Re: gnome-screensaver failure - can't access samba password database - not running as root
Thank you for taking the time to report this issue and help to improve Ubuntu. The thing is, this isn't really a bug at all. gnome-screensaver is working exactly as it's supposed to, as is pam_smbpass; it just logs (at severity LOG_DEBUG) a notice that the smbpasswd database is not being updated, because the process isn't running as root. We don't want to stop logging that information, because there are cases when other apps might call pam_smbpasswd with the wrong permissions, and we want it to be easy to figure out that this is what's going on. We don't want to have gnome-screensaver skip calling pam_smbpass (although if you don't need Windows filesharing support, you can uninstall the libpam-smbpass package from your own system), because this would require complex special-casing of this one program in the configuration. And we certainly don't want pam_smbpass running as root when you're authenticating to the screensaver. So I don't see any solution to make this log message disappear that wouldn't be worse than what we currently have. I'm therefore closing this bug as 'wontfix'. ** Package changed: gnome-screensaver (Ubuntu) => samba (Ubuntu) ** Changed in: samba (Ubuntu) Status: New => Won't Fix -- gnome-screensaver failure - can't access samba password database - not running as root https://bugs.launchpad.net/bugs/375569 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs