Hi all,
I have been having an ongoing minor problem with an application (AUC) that
uses PAM for authentication. AUC has it's own userbase/password, but needs
the users to exist in /etc/password as well (for email). Every time a user
logs in it generates an error in the logs similar to:
Jan  7 13:01:33 vortex PAM_pwdb[30287]: get passwd; pwdb: request not
recognized

the associated pam.d file is:

#%PAM-1.0
auth         required   /lib/security/pam_smb_auth.so debug
auth       sufficient   /lib/security/pam_pwdb.so shadow nullok
auth       required     /lib/security/pam_nologin.so
account    required     /lib/security/pam_pwdb.so
password   required     /lib/security/pam_pwdb.so not_set_pass nullok
session    required     /lib/security/pam_pwdb.so


To fix this issue I have removed debug from line 1 and commented out line 2,
now this seems to work. Can anyone see any 'unintended consequences' of
this? I have been reading on-line about PAM but am still quite hazy, it
seems to me though that line 2 is asking for a password and expecting it to
be in the shadow file, which it isn't and because it is only set at
sufficient things continue.
_________________________________________
Simon Bryan
IT Manager
OLMC Parramata
ICQ#: 137562751
_________________________________________

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to