similar to: auth-worker always opens PAM session

Hi there, Other auth modules (eg passwd-file) allow a username_format to be specified, but not the PAM module. The use-case, is where I want a static userdb configuration which takes the domain into account but still want to use PAM for authentication, eg: userdb { driver = static args = uid=8 gid=12 home=/mnt/storage/mail/vhosts/%d/%n } passdb { driver = pam args = username_format=%n

While configuring my server with dovecot I noticed that the PAM authentication driver does not support the username_format option as does the password file driver. This didn't seem too hard to implement so I through together a patch. As you can see in the attached patch I only modify the username sent to PAM. Despit doing this I run into the domain lost

Hi, I used to have a set of samba shares working fine on a Centos 4 machine, accessed by XP clients and authenticated against a 2003 SBS server. Then I did a yum upgrade and a week later noticed that the seldom-used SMB shares have stopped working. No other changes to the Centos server, and no domain changes. The XP clients now just keep prompting for authentication. A wireshark trap shows

With OpenSSH 2.9.9p2 as the server, I'm not able to do scp or "ssh machinename command" in general to any of my Suns! I tracked this down a bit; the problem occurs only when PAM support is enabled. However, if I remove line 430 of session.c, "do_pam_session(s->pw->pw_name, NULL);" inside of do_exec_no_pty, the problem goes away. It looks like the following entry

I am using PAM and pam_smbpass.so with Samba 2.999 (Debian sid package). If, in /etc/pam.d/samba, I set session required pam_smbpass.so then login fails, and the log says: [2002/08/04 15:43:26, 0] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: session setup failed : Module is unknown [2002/08/04 15:43:26, 1] smbd/session.c:session_claim(103) pam_session

http://bugzilla.mindrot.org/show_bug.cgi?id=83 ------- Additional Comments From djm at mindrot.org 2003-03-10 15:49 ------- Created an attachment (id=247) --> (http://bugzilla.mindrot.org/attachment.cgi?id=247&action=view) Call pam_session after child fork() Hopefully this patch will allow people to gather the feedback necessary to close this bug. ------- You are receiving this

Hi, I had an active-directory authentication based samba system up and running, working well. However, I tried to access an SMB share on the server a few days back and just get a windows login user/password prompt. I'm trying to debug why theres a "system error". PAM is configured for pam_winbind.so in /etc/pam.d/system-auth, and I can ssh into the system using a domain

http://bugzilla.mindrot.org/show_bug.cgi?id=83 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- Version|3.0.2p1 |-current ------- Additional Comments From djm at mindrot.org 2002-01-31 21:46 ------- I'm putting some replies from the

heres a fix for pam support im openssh, inline and attached.. openssh calls do_pam_session early, before a fork(). it does this on the proc still running as root, so it checks the users limits, against what root has running, and depending on limits can fail at the fork() (and almost always does). this patch moves it past the fork. ive been running it for a couple of weeks and everything seems

Hello all, On Redhat 6.2, the PAM_unix module logs the session opening, but not the session closing. This was logged as of 2.3.0p1. Upgrading to 2.5.1p1 makrs the start of the problem. Thanks in advance, Victor -- Victor J. Orlikowski ====================== v.j.orlikowski at gte.net orlikowski at apache.org vjo at us.ibm.com

Beyond any more general questions of whether pam sessions *should* be run as root, is there an immediate security concern with moving the pam_open_session (and pam_setcred) stuff to the parent (root) process? (E.g., via the patch below.) -- Mike Stone diff -u -r1.4 auth-pam.c --- auth-pam.c 25 Jun 2002 00:45:33 -0000 1.4 +++ auth-pam.c 25 Jun 2002 20:33:41 -0000 @@ -286,6 +286,8 @@

I have a centos box using kernel 2.6.9-42.0.2.ELsmp that had a samba server running very nicely until 2 days ago. Out of the blue, users can't access any shares. We have 5 users and 6 shares, one of which is an MS access database that gets the most use. I thought the smbpasswd database may be corrupt so I replaced it with a backup, but no go. I deleted the smbpasswd database, readded users,

I have a centos box using kernel 2.6.9-42.0.2.ELsmp that had a samba server running very nicely until 2 days ago. Out of the blue, users can't access any shares. We have 5 users and 6 shares, one of which is an MS access database that gets the most use. I thought the smbpasswd database may be corrupt so I replaced it with a backup, but no go. I deleted the smbpasswd database, re-added

http://bugzilla.mindrot.org/show_bug.cgi?id=83 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |misiek at pld.org.pl Summary|PAM limits applied |PAM limits applied |incorrectly

On Solaris, the pam_unix module includes a pam_session which updates the lastlog file. Since OpenSSH calls pam_session before reading the lastlog file, SSH logins to systems with this configuration (as well as similar ones, I'd imagine) report the last login time and remote host as the values from the current session. My solution to this problem is to call pam_open_session in the child,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm pleased to (finally) announce the availability of my GSSAPI Key Exchange patch for OpenSSH 4.7p1. Whilst OpenSSH contains support for doing GSSAPI user authentication, this only allows the underlying security mechanism to authenticate the user to the server, and continues to use SSH host keys to authenticate the server to the

Hi, Apologies if my attempts to subscribe bombarded this list with empty emails. We're running openssh 3.6.1p1 on Linux i386 and need to chroot and modify people's capabilities (Linux specific) when they log in. To do this we've compiled openssh with pam support and then configured pam to chroot people and alter their capabilities (such as giving them the privilege to bind to a port

Hello everybody! I have the following problem using version 3.7.1p1 on redhat linux 7.3 and 9. We are running a system where users home directories reside on AFS. Up to and including version 3.6.1p2 we used Simon Wilkinson's gssapi patch in conjunction with a pam_module, which executed 'aklog', a program that converts a kerberos ticket to an AFS token. This does not work anymore

Hello, I'm using Samba 2.2.7a on RedHat 9.0. I'm trying to set-up universal logons between a Samba Server and a W2K SP3 DC, which has restrictanonymous=1. I followed the procedure as described at http://ftp.easynet.be/samba/docs/man/winbind.html - I managed to join the Samba server (MYSAMBASRV) to the domain (MYDOMAIN) - I used wbinfo with the -A switch to store the credentials of a

Hi, I'm seeing the following error when I tried to access shared home folder on samba. [2004/09/30 11:35:30, 0] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: session setup failed : Permission denied [2004/09/30 11:35:30, 1] smbd/session.c:session_claim(124) pam_session rejected the session for ARKDOM/nzhang [smb/1769/100] [2004/09/30 11:35:30, 1]