im calling the following module in /etc/pam.d/common-auth:
auth optional pam_krb5_migrate.so debug
and this module is supposed to create a Kerberos principal using login credentials, but it fails when trying to retrieve PAM_AUTHTOK into variable pass with the following part of the code:
retval = pam_get_item(pamh, PAM_AUTHTOK, (const void **)&pass);
if (retval != PAM_SUCCESS) {
...
} else if (pass == NULL) {
retval = PAM_AUTHTOK_RECOVER_ERR;
goto cleanup;
}
the module seems to be ok, but I'm not sure if i missed something in pam configuration, or if the way I use it is wrong.
/var/log/auth.log
Aug 5 13:55:07 luist login(pam_krb5_migrate)[2374]: Authenticating as principal pam_migrate/myhostname@MYREALM with keytab /etc/security/pam_krb5.keytab.
Aug 5 13:55:07 luist login(pam_krb5_migrate)[2374]: username [luist] obtained
Aug 5 13:55:10 luist login[2374]: pam_unix(login:session): session opened for user luist by LOGIN(uid=0)
Aug 5 13:55:10 luist dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.29" (uid=5312 pid=3761 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.45" (uid=0 pid=2374 comm="/bin/login -- "))
How can i make this work?
Thanks in advance
_______________________________________________ Pam-list mailing list Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list
