On Thu, 4 Sep 2003, joão garcia wrote: > hi everybody , i have been trying to use PAM authentication in my apache web > server since two Weeks i have been trying, i really need some help. > that's what i have been done so far: > > other: > > account required /lib/security/pam_deny.so > auth required /lib/security/pam_deny.so > auth required /lib/security/pam_warn.so > password required /lib/security/pam_deny.so > password required /lib/security/pam_warn.so > session required /lib/security/pam_deny.so Assuming that you have not set up PAM with a separate config file per service (why not?!) and this is the one being used for httpd, your problem is that apache will fail to satisfy the session module requirement. Your PAM config for apache should only include account and auth entries. This really should be in the README for the mod_auth_pam apache module as everyone seems to get bitten by it. Jason Clifford -- UKFSN.ORG Finance Free Software while you surf the 'net http://www.ukfsn.org/ ADSL Broadband available now _______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list