9:06 a.m.
Hi,
I've got the SSSD packages from RHEL 5.6 installed on a RHEL 5.4 system.
SSSD works fine on the command line and when logging in via KDE. Also
logging on with cached credentials (when network is off) works like a charm,
on the command line.
When I want to login with cached credentials via KDE (network disabled.), it
goes wrong. KDE throws me a new login prompt, saying I used te wrong userid
or password.
When I check the /var/log/secure file, I see the following happens:
Jan 27 15:59:49 hpdw0001 su: pam_unix(su-l:session): session closed for user
root
Jan 27 16:00:01 hpdw0001 crond[21924]: pam_unix(crond:session): session
opened for user root by (uid=0)
Jan 27 16:00:01 hpdw0001 crond[21924]: pam_unix(crond:session): session
closed for user root
Jan 27 16:00:20 hpdw0001 gdm[3744]: pam_unix(gdm:session): session closed
for user nxp21358
Jan 27 16:00:20 hpdw0001 gdm[3744]: pam_console(gdm:session): getpwnam
failed for nxp21358
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_unix(gdm:auth): check pass; user
unknown
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_unix(gdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_sss(gdm:auth): User info message:
Authenticated with cached credentials.
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_sss(gdm:auth): authentication
success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=nxp21358
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_succeed_if(gdm:account): error
retrieving information about user nxp21358
Jan 27 16:00:39 hpdw0001 gdm[3744]: pam_unix(gdm:account): could not
identify user (from getpwnam(nxp21358))
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_unix(gdm:auth): check pass; user
unknown
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_unix(gdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_sss(gdm:auth): User info message:
Authenticated with cached credentials.
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_sss(gdm:auth): authentication
success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=nxp21358
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_succeed_if(gdm:account): error
retrieving information about user nxp21358
Jan 27 16:00:49 hpdw0001 gdm[3744]: pam_unix(gdm:account): could not
identify user (from getpwnam(nxp21358))
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_unix(gdm:auth): check pass; user
unknown
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_unix(gdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_sss(gdm:auth): User info message:
Authenticated with cached credentials.
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_sss(gdm:auth): authentication
success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=nxp21358
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_succeed_if(gdm:account): error
retrieving information about user nxp21358
Jan 27 16:00:58 hpdw0001 gdm[3744]: pam_unix(gdm:account): could not
identify user (from getpwnam(nxp21358))
Jan 27 16:01:01 hpdw0001 crond[21958]: pam_unix(crond:session): session
opened for user root by (uid=0)
Jan 27 16:01:11 hpdw0001 crond[21958]: pam_unix(crond:session): session
closed for user root
Jan 27 16:01:39 hpdw0001 gdm[3744]: pam_unix(gdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=nxp21358
Jan 27 16:01:39 hpdw0001 gdm[3744]: pam_sss(gdm:auth): authentication
success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=nxp21358
Jan 27 16:01:39 hpdw0001 gdm[3744]: pam_unix(gdm:session): session opened
for user nxp21358 by (uid=0)
Jan 27 16:01:50 hpdw0001 su: pam_unix(su-l:auth): authentication failure;
logname=nxp21358 uid=3396 euid=0 tty=pts/8 ruser=nxp21358 rhost= user=root
Jan 27 16:01:56 hpdw0001 su: pam_unix(su-l:session): session opened for user
root by nxp21358(uid=3396)
I'm not a PAM expert, but what I get from this, is that the pam_succeed
module triggers a fail because pam_unix cannot find the user. How can I
solve this ??
cheers,
Andy