[Bug 335521] New: After upgrade from 10. 2 my pam config gets screwed continuously - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 343731] New: install fails...

[Bug 335521] New: After upgrade from 10. 2 my pam config gets screwed continuously

older
[Bug 344236] New: Upgrade to 10.3...

bugzilla_noreply＠novell.com

21 Oct 2007 21 Oct '07

11:01

https://bugzilla.novell.com/show_bug.cgi?id=335521 Summary: After upgrade from 10.2 my pam config gets screwed continuously Product: openSUSE 10.3 Version: Final Platform: i686 OS/Version: openSUSE 10.3 Status: NEW Severity: Normal Priority: P5 - None Component: Update Problems AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: gleixner@bib-bvb.de QAContact: jsrain@novell.com Found By: Customer In 10.2. i had in my /etc/pam.d/common-auth: auth required pam_env.so auth sufficient pam_unix2.so auth sufficient pam_krb5.so use_first_pass auth required pam_deny.so After update the pam_krb5 entry vanished - as expected because i did not use yast to configure the kerberos client. With 10.3 i tried to use yast to configure the client, but it changed the file to: auth required pam_env.so auth sufficient pam_unix2.so auth required pam_krb5.so use_first_pass auth required pam_deny.so which does not work for me - i'm not sure why. I can login using a local user account but not via kerberos. With the older config this worked. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

28 Oct 28 Oct

14:39

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521#c1 flo gleixner changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Update Problems |Basesystem --- Comment #1 from flo gleixner 2007-10-28 08:39:33 MST --- Here debug messages if pam_krb5.so is "required": Oct 28 15:21:20 mamba login[23764]: pam_unix2(login:auth): pam_sm_authenticate() called Oct 28 15:21:20 mamba login[23764]: pam_unix2(login:auth): username=[flo] Oct 28 15:21:22 mamba login[23764]: pam_unix2(login:auth): wrong password, return PAM_AUTH_ERR Oct 28 15:21:22 mamba login[23764]: pam_krb5[23764]: authentication succeeds for 'flo' (flo@GOLDACH.TEST) Oct 28 15:21:22 mamba login[23764]: FAILED LOGIN 2 FROM /dev/tty2 FOR flo, Authentication failure Here debug messages if pam_krb5.so is sufficient: Oct 28 15:22:21 mamba login[23818]: pam_unix2(login:auth): pam_sm_authenticate() called Oct 28 15:22:21 mamba login[23818]: pam_unix2(login:auth): username=[flo] Oct 28 15:22:23 mamba login[23818]: pam_unix2(login:auth): wrong password, return PAM_AUTH_ERR Oct 28 15:22:23 mamba login[23818]: pam_krb5[23818]: authentication succeeds for 'flo' (flo@GOLDACH.TEST) Oct 28 15:22:23 mamba login[23818]: pam_unix2(login:setcred): pam_sm_setcred() called Oct 28 15:22:23 mamba login[23818]: pam_unix2(login:setcred): username=[flo] Oct 28 15:22:23 mamba login[23818]: pam_unix2(login:setcred): pam_sm_setcred: PAM_SUCCESS probably rather a pam or kerberos problem? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

9 Nov 9 Nov

16:25

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521 Cyril Hrubis changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.provo.novell.com |mc@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:41

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

12 Nov 12 Nov

17:00

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521#c6 Harald Mueller-Ney changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hmuelle@novell.com Status|NEEDINFO |ASSIGNED Info Provider|ast@novell.com | --- Comment #6 from Harald Mueller-Ney 2007-11-12 10:00:26 MST --- We will fix this with next openSUSE version, use of kerberos is not a typical home user setup. People using kerberos are skilled and could solve this issue on their own. Difference: suffient: we are fine, no more checks required: check has to work, but we go on with next modules (till we find a sufficient one) Michael please fix for stable/factory and close. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

20:09

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521#c7 --- Comment #7 from flo gleixner 2007-11-12 13:09:37 MST --- Even if people using kerberos are skilled, it is a problem, that SuSEconfig continuously changes the pam config file by calling pam-config. This pam-config script writes the lines auth sufficient pam_unix2.so auth required pam_krb5.so use_first_pass auth required pam_deny.so which cause a succesful kerberos authentication fall through to pam_deny. Editing the file /etc/pam.d/common-auth is only fruitful until the next SuSEconfig (or yast2) call. Then you have to re-edit the file again. I think fixing the pam-config script and/or adding a switch "shall yast2 change pam config" would solve the problem. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13 Nov 13 Nov

10:51

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521#c8 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #8 from Michael Calmer 2007-11-13 03:51:19 MST --- Fix submitted to STABLE and to the buildservice. http://download.opensuse.org/repositories/Linux-PAM/openSUSE_10.3/ (pam-config version 0.25 includes this fix) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

3 Dec 3 Dec

16:18

New subject: [Bug 335521] After upgrade from 10. 2 my pam config gets screwed continuously

https://bugzilla.novell.com/show_bug.cgi?id=335521#c9 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |R.Escher@osram.de --- Comment #9 from Michael Calmer 2007-12-03 09:18:18 MST --- *** Bug 344236 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=344236 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

5996

Age (days ago)

6039

Last active (days ago)

Download

7 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com