On Sun, 7 Jul 2013 00:46, Felix Miata
On 2013-07-06 23:10 (GMT+0200) Yamaban composed:
Missing $HOME dir is a known trouble cause (since before pam), pam checks existance and can deny login for missing $HOME, pam-config decides.
Where is "pam-config"? Are you referring to /etc/pam.d/?
Any config option (even ./configure during compile) that can change this behavior. Last time I needed to change that behavior was on RHEL3 and there it was in /etc/pam.d/* [snip]
if login succeeds, look into the auth path for first-logins and what's different beyond setting up $HOME,
No idea what you're referring to here.
in the beginning of pam, first-time logins took another code-path during auth, added checks ($HOME, passwd age, ...) where done. This could have been be moved into normal codepath since then.
Why is traditional openSUSE nullpass working but -d not working a different paradigm from Fedora & Mageia/Mandriva nullpass not working but -d working? -d is simpler to implement each time, and does not require the second <ENTER> after providing login name at prompt.
On VAX and older solaris (mid 90ies) the '-d' option replaced the passwd-hash with a simple 'x' and thus disabled login for this account. Now, looking at the man-page off passwd it should set the passwd-hash to '' [empty], but what does "passwd $USER <return>,<return>" then different? setting a hash of [empty] perhaps? Added info: the "old" passwd was replaced with the one from the shadow-package, that may have added some behavior change. Have you looked at the content of /etc/login.defs between the different Distros yet? And the content of /etc/pam.d/* needs a diploma to get through. But of interrest here is esp. the diff between 'newusers' and 'login', that could be some of the cause. Different distro, different config during compile, different config on system. In the beginning Mandrake, later Mandriva, now Mageia, have taken the Fedora source-rpms changed some specs and did a rebuild. Thus Fedora and Mageia are much nearer in behavior than Fedora and openSUSE for example. -Yamaban. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org