On Wed, Jun 29, 2011 at 2:02 PM, Doug Weimer <[email protected]> wrote: > I'm can't think of how it would affect group enumeration, but check the > differences in the pam stacks between su and gdm if you're using gnome.
I have compared his pam stack for su and gdm to other machines in which users don't have any issues. They do match. > One way to test pam issues is have the user login via various methods and > see which ones have the correct groups. > > 1. Have the user run 'xterm -ls.' Verify it still shows the old groups It only shows one group, correct. > 2. Have the user 'su - username'. Does that show the additional groups? It shows the additional groups as it should. > 3. Have the user ssh to localhost and login. Does that show the additional > groups? It shows the additional groups as it should. None of these users have root, so anything in the system-wide config should still remain untouched -- including /etc/pam.d. _______________________________________________ Tech mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
