search for: pam_account

...: Failed to marshall NET_R_SAM_LOGON. Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] rpc_server/srv_pipe.c:api_rpcTNP(1215) Apr 21 17:27:38 Venom smbd[7753]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_account(268) Apr 21 17:27:38 Venom smbd[7753]: PAM: UNKNOWN ERROR for User: thuang Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_accountcheck(381) Apr 21 17:27:38 Venom smbd[7753]: PAM: Account Validation Failed - Rejecting User! Thanks, Norman Jordan

Is it intentional that password auth using PAM continues trying to log on (giving password 3 prompts) in the case that a user is disabled (so that pam_account returns an error code). It can be argued both ways (saying 'you are disabled' is giving out too much information, making it look like you are entering the wrong password confuses and frustrates the user)

----- Forwarded message from Andrea Barisani <lcars at infis.univ.trieste.it> ----- Date: Fri, 2 May 2003 14:01:33 +0200 From: Andrea Barisani <lcars at infis.univ.trieste.it> To: openssh at openssh.com Subject: openssh 3.6.1_p2 problem with pam Hi, I've just updated to openssh 3.6.1_p2 and I notice this behaviour: # ssh -l lcars mybox [2 seconds delay] lcars at mybox's

http://bugzilla.mindrot.org/show_bug.cgi?id=1053 ------- Additional Comments From dtucker at zip.com.au 2005-07-14 13:51 ------- Created an attachment (id=938) --> (http://bugzilla.mindrot.org/attachment.cgi?id=938&action=view) only send messages from monitor on pam_account account failure This is one way to fix this. There might be a tidier way... ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1087 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- Group|Portable OpenSSH | ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...Exit status 0 real 0m34.027s user 0m0.014s sys 0m0.083s Fri May 23 11:51:32 EDT 2008 [root at statics31 security]# And the log from 192.168.1.21 (different run so the dates won't match): ==> /var/log/secure <== May 23 12:01:56 192.168.1.21 pam_stack[23836]: called for "PAM_ACCOUNT" May 23 12:01:56 192.168.1.21 pam_stack[23836]: called from "sshd" May 23 12:01:56 192.168.1.21 pam_stack[23836]: initializing May 23 12:01:56 192.168.1.21 pam_stack[23836]: creating child stack `system-auth' May 23 12:01:56 192.168.1.21 pam_stack[23836]: creating environment May...

...connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.) SMB connection failed mount: backgrounding "//curacao/cs" When I look into the server-log for the client, I see the following: [2001/08/08 16:21:26, 0] passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: midas [2001/08/08 16:21:26, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! My current (new) /etc/pam.d/samba looks like that: #%PAM-1.0 auth required /lib/security/pam_smb_auth.so nullok shadow account req...