Re: pam_rootok(8) + pam.d/sudo symlink to pam.d/su

2005-10-07 Thread Dag-Erling Smørgrav
"Brian A. Seklecki" <[EMAIL PROTECTED]> writes: > PAM doesn't cache authentication information does it? This > "use_first_pass" argument to modulesn't couldn't be getting in the way? use_first_pass means "use the password that was typed in previously", while try_first_pass means "try the password

Re: pam_rootok(8) + pam.d/sudo symlink to pam.d/su

2005-10-07 Thread Dag-Erling Smørgrav
"Brian A. Seklecki" <[EMAIL PROTECTED]> writes: > Is there any way to set PAM to trace/debug it's decision making > process? yes, but you need to recompile with PAM_DEBUG defined. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-questions@fr

Re: pam_rootok(8) + pam.d/sudo symlink to pam.d/su

2005-10-07 Thread Brian A. Seklecki
On Fri, 7 Oct 2005, Dag-Erling Smørgrav wrote: No, unless sudo is broken. What sudo implementation are you using? PAM doesn't cache authentication information does it? This "use_first_pass" argument to modulesn't couldn't be getting in the way? You know, this would be solved by including

Re: pam_rootok(8) + pam.d/sudo symlink to pam.d/su

2005-10-07 Thread Brian A. Seklecki
sudo-1.6.8.9 via Ports. Is there any way to set PAM to trace/debug it's decision making process? ~BAS On Fri, 7 Oct 2005, Dag-Erling Smørgrav wrote: "Brian A. Seklecki" <[EMAIL PROTECTED]> writes: However, when I do that, all wheel-group users are automatically passing auth requirements due

Re: pam_rootok(8) + pam.d/sudo symlink to pam.d/su

2005-10-07 Thread Dag-Erling Smørgrav
"Brian A. Seklecki" <[EMAIL PROTECTED]> writes: > However, when I do that, all wheel-group users are automatically > passing auth requirements due to: > > authsufficient pam_rootok.so no_warn > > ...which I assume is happening because sudo(8) is running SUID root? No, un