Sebastian Hesselbarth schrieb:
Currently I am testing srss 4.2 on Debian lenny and used the
Wiki-Howto for Ubuntu 9.10 at sun-rays.org. There it says:
"comment out all pam entries in /etc/pam.d/gdm-2.20 referring to
pam_sunray_hotdesk.so as hotdesking seems to be currently broken".


So what does not work about hotdesking? How does it fail?

The pam_sunray_hotdesk module is needed to activate "RHA", i.e. the "Sun Ray Session Lock" way of unlocking a session after hotdesking. If there are problems with that, you should check, if /opt/SUNWut/lib/loginGUI works. loginGUI requires Motif libraries to be installed.

You can use the -D option to utpolicy to properly disable RHA. Does that work instead of removing pam_sunray_hotdesk? If it does, then loginGUI is surely your problem.

Well, I can confirm that it is broken on Debian too ;) But I want
do dig a bit deeper and want to know if there is a good way to
debug what exactly is broken.

When I do not remove the pam entries I see the following in syslog
when connecting with a soft client (with policy enabled):

utdtsession: Add (11,pseudo.5202c768d3a706f5edb11bd53791c687,special)
utauthd: Worker7 NOTICE: SESSION_OK pseudo.5202c768d3a706f5edb11bd53791c687
utguiauth: pam_proc: PAM authentication failed. Error: [Module is unknown] (28)
utguiauth: pam_proc: PAM authentication failed. Error: [Module is unknown] (28)
utguiauth: pam_proc: PAM authentication failed. Error: [Module is unknown] (28)

Anyone knows what error 28 means and what "Module" is unknown? Any
tips for debuging pam?


Error 28 is PAM_MODULE_UNKNOWN. "Module is unknown" is the text version of that. It means that a PAM module is configured in a Sun Ray related PAM stack, which isn't available on your system.

utguiauth is completely unrelated to normal login or hotdesking. If connected to session start, you probably have 'self-registration' policy enabled and the problem is in /etc/pam.d/utselfreg.

HTH

Regards

- Jörg
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to