search for: pam_get_item

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi OpenSSH'ers, I am emailing you to ask is it possible to record failed passwords attempts and log them to syslog? Are there patches available for this? Has anyone managed to do this before? Are there alternitive methods? Many Thanks, A - -- Alan Neville, Postgraduate Education Officer, DCU Students' Union 2009/2010, BS.c Computer

...dovecot: auth-worker(34874): Debug: pam(woodsb02,192.168.1.13,<GRJsRuxkf17AqAEN>): lookup service=imap Feb 11 09:20:40 mail auth: in openpam_dispatch(): calling pam_sm_authenticate() in /usr/lib/pam_krb5.so.6 Feb 11 09:20:40 mail auth: in pam_get_user(): entering Feb 11 09:20:40 mail auth: in pam_get_item(): entering: PAM_USER Feb 11 09:20:40 mail auth: in pam_get_item(): returning PAM_SUCCESS Feb 11 09:20:40 mail auth: in pam_get_user(): returning PAM_SUCCESS Feb 11 09:20:40 mail auth: in pam_sm_authenticate(): Got user: woodsb02 Feb 11 09:20:40 mail auth: in pam_get_item(): entering: PAM_RUSER Feb...

...4): Debug: > pam(woodsb02,192.168.1.13,<GRJsRuxkf17AqAEN>): lookup service=imap > Feb 11 09:20:40 mail auth: in openpam_dispatch(): calling > pam_sm_authenticate() in /usr/lib/pam_krb5.so.6 > Feb 11 09:20:40 mail auth: in pam_get_user(): entering > Feb 11 09:20:40 mail auth: in pam_get_item(): entering: PAM_USER > Feb 11 09:20:40 mail auth: in pam_get_item(): returning PAM_SUCCESS > Feb 11 09:20:40 mail auth: in pam_get_user(): returning PAM_SUCCESS > Feb 11 09:20:40 mail auth: in pam_sm_authenticate(): Got user: > woodsb02 > Feb 11 09:20:40 mail auth: in pam_get_item()...

...actually stored in AD. What am I doing wrong? Are there additional libraries that need to be installed on AIX in order to pam_winbind.c to compile? Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:70: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:85: warning: assignment discards qualifiers from pointer target type nsswitch...

...automatically. There's the handy pam module pam_mkhomedir.so to automagically create home directories, but unfortunatly Dovecot wasn't calling pam_open_session to run the session setup pam modules. I made a small patch to passdb-pam.c to call pam_open_session between pam_acct_mgmt and pam_get_item and now I my home dirs are automagically created and everyone is happy. So, I figured I'd share the little patch in case someone else finds it useful. My patch doesn't properly close the session which will probably iritate more advanced session modules that actually have something to...

...olaris 8. I have the source for samba 2.2.8 on the server. When I issue a make nsswitch/pam_winbind.so, I receive many compiler warnings, such as: Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:72: warning: passing arg 3 of `pam_get_item' from incompa tible pointer type nsswitch/pam_winbind.c:75: warning: passing arg 2 of pointer to function from in compatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:90: warning: assignment discards qualifiers from pointer target type nsswitch/...

...g nsswitch/winbindd_misc.c Compiling nsswitch/winbindd_cm.c Compiling nsswitch/winbindd_wins.c Compiling nsswitch/winbindd_rpc.c Linking bin/winbindd Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:72: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:75: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:90: warning: assignment discards qualifiers from pointer target type nsswitch/pa...

..., I am trying to install samba on AIX. I have done a "configure", but while running "make" it gives the following error. Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: warning: passing arg 3 of `pam_get_item' from incompa nsswitch/pam_winbind.c:70: warning: passing arg 2 of pointer to function from in nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:85: warning: assignment discards qualifiers from pointer nsswitch/pam_winbind.c: In function `_winbind_read_password&...

https://bugzilla.mindrot.org/show_bug.cgi?id=2163 Bug ID: 2163 Summary: unchecked returned value from pam_get_item() Product: Portable OpenSSH Version: -current Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: PAM support Assignee: unassigned-bugs at mindrot.org Reporter: loganad...

...Compiling lib/dummysmbd.c with -fPIC Compiling libads/kerberos.c with -fPIC Compiling libads/ads_status.c with -fPIC Linking nsswitch/libnss_wins.so Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:71: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:74: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:89: warning: assignment discards qualifiers from pointer target type nsswitch/pa...

...rapper -I. -I/usr/local/include -I/usr/samba-3.0.1/source LIBS = LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok LDFLAGS = Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: warning: passing arg 3 of `pam_get_item' from incompa tible pointer type nsswitch/pam_winbind.c:70: warning: passing arg 2 of pointer to function from in compatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:85: warning: assignment discards qualifiers from pointer target type ns...

...rapper -I. -I/usr/local/include -I/usr/samba-3.0.1/source LIBS = LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok LDFLAGS = Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: warning: passing arg 3 of `pam_get_item' from incompa tible pointer type nsswitch/pam_winbind.c:70: warning: passing arg 2 of pointer to function from in compatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:85: warning: assignment discards qualifiers from pointer target type ns...

...--with-acl-support --with-utmp --with-winbind --with-ads --with-ldap --with-krb5=/opt/local/kerberos5 --with-pam The make errors out with: ... Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:71: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:74: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:89: warning: assignment discards qualifiers from pointer target type nsswitch...

...m module > > pam_mkhomedir.so to automagically create home directories, but > > unfortunatly Dovecot wasn't calling pam_open_session to run the session > > setup pam modules. I made a small patch to passdb-pam.c to call > > pam_open_session between pam_acct_mgmt and pam_get_item and now I my > > home dirs are automagically created and everyone is happy. > > So, I figured I'd share the little patch in case someone else finds it > > useful. My patch doesn't properly close the session which will probably > > iritate more advanced session m...

...r/log/auth.log Jun 29 10:45:57 ubugdm su: pam_unix(su-l:auth): authentication failure; logname= uid=1000 euid=0 tty=/dev/pts/0 ruser=adminuser rhost= user=usertest3 Jun 29 10:45:57 ubugdm su: pam_winbind(su-l:auth): getting password (0x00000388) Jun 29 10:45:57 ubugdm su: pam_winbind(su-l:auth): pam_get_item returned a password Jun 29 10:45:57 ubugdm su: pam_winbind(su-l:auth): request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_USER_UNKNOWN (10), NTSTATUS: NT_STATUS_NO_SUCH_USER, Error message was: The specified account does not exist. Jun 29 10:45:59 ubugdm su: FAILED SU (to usertest3...

...Linking bin/rpcclient Linking bin/smbcacls Linking bin/profiles Linking bin/ntlm_auth Linking bin/smbcquotas Linking bin/eventlogadm Linking bin/wbinfo Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:76: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:79: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:94: warning: assignment discards qualifiers from pointer target type nsswitch/pa...

...ype libads/kerberos.c: In function `kerberos_kinit_password': libads/kerberos.c:84: warning: passing arg 4 of `krb5_get_init_creds_password' discards qualifiers from pointer target type nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:70: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:85: warning: assignment discards qualifiers from pointer target type nsswitch/pa...

...pass; user unknown Aug 23 14:06:01 localhost lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Aug 23 14:06:01 localhost lightdm: pam_winbind(lightdm:auth): getting password (0x00000010) Aug 23 14:06:01 localhost lightdm: pam_winbind(lightdm:auth): pam_get_item returned a password Aug 23 14:06:01 localhost lightdm: pam_winbind(lightdm:auth): user 'torolni' granted access Aug 23 14:06:01 localhost lightdm: gkr-pam: error looking up user information Aug 23 14:06:01 localhost lightdm: pam_unix(lightdm:account): could not identify user (from getpwnam(...

...#39;m trying to change the PAM_USER within a pam module, and observed that dovecot 0.99 does not support this. I then looked at 1.x and found: src/auth/passdb-pam.c:232: /* FIXME: this doesn't actually work since we're in the child process.. */ status = pam_get_item(pamh, PAM_USER, (linux_const void **)&item); if (status != PAM_SUCCESS) { *error = t_strdup_printf("pam_get_item() failed: %s", pam_strerror(pamh, status)); return status; } auth_req...

...AGS="$CFLAGS $EXTRA_CFLAGS -Werror" # Linux-PAM has (incorrectly) overdone const AC_MSG_CHECKING(for extra const in PAM headers) AC_TRY_COMPILE([#include <security/pam_appl.h>], [ pam_handle_t *pamh = NULL; char *item; pam_get_item(pamh, PAM_SERVICE, (void **) &item); ], [ AC_MSG_RESULT(no) DEFINES="$DEFINES -DPAM_GET_CONST=" ], [ AC_MSG_RESULT(yes) DEFINES="$DEFINES -DPAM_GET_CONST=co...