Hello everybody,

I set up four RHEL 5.4 Tikanga SRSS 4.2 Server in a FOG, each server is a 32GB 
VM on two hexcore ESXi servers with appropriate disk space (56GB for each VM).
Each ESXi server hosts two SRSS4.2 server. User authentication is done by a 
connected Active Directory server, for which I configured pam_nss_ldap to use 
some non-privileged user for the LDAP user lookups in the ADS. The ADS server 
is a 2k3 R2 with "Identity Management for Unix" installed.

Logging in really works smooth.

Everything is fine, users are happy until they pull their cards, hit the
<Shift-BREAK> keystroke or wait for the idle session timeout. After the
screen has been locked, it is impossible to get in again, because although 
you enter the correct password, this grey screensaver window keeps telling me
that my password is incorrect. And to terminate the session for myself,
I tried the old+<CTRL-ALT-3x DELETE> keystroke, but no avail, this keystroke
seems to be disabled with the new firmware.
From another session I can see in the web administration panel (server:1660) 
in the sessions tab, that I have plenty sessions, but there is no UNIX 
username associated to any session. Is this a hint to my problem?

a) Is it possible to temporarily disable the screenlock for all users and if
how can I revert this, when everything will work as wanted?
b) Why does the screenlock not accept the correct passwords?

If necessary, I will post the required configuration files from the RHEL
system for your better understanding of my setup. I looked into
/var/log/messages, but I saw no error message regarding pam. But maybe I am 
too blind to see the right messages.

Yours sincerely,

Martin Allert

-- 

"Beware of health books - You might die of a misprint." (Mark Twain)

----------------------------------------------------------------------
 arago AG, Institut für komplexes Datenmanagement
 Eschersheimer Ldstr. 526-532, 60433 Frankfurt/Main, [email protected],
 Tel. 069/405680, Fax 069/40568111, http://www.arago.de
----------------------------------------------------------------------

------------------------------------------------------------------------
Bankverbindung: Frankfurter Sparkasse, BLZ: 500 502 01, Kto.-Nr.: 79 343
Vorstand: Hans-Christian Boos, Martin Friedrich · Vorsitzender des
Aufsichtsrats: Dr. Bernhard Walther
Sitz: Kronberg im Taunus · HRB 5731 · Registergericht: Königsstein im
Taunus, Ust.Idnr. DE 178572359 · Steuernummer 2603 003 228 43435
------------------------------------------------------------------------

-- Bitte schonen Sie unsere Umwelt. Muessen Sie diese Email wirklich ausdrucken?

Attachment: pgpEjaxbduJAA.pgp
Description: PGP signature

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to