Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Question about passwords in spells

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Thomas HOUSSIN <thomas.houssin AT gmail.com>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Question about passwords in spells
  • Date: Thu, 16 Dec 2004 18:02:53 +0100

I had the pb, and fixed it this way : (this is an almost exact
copy/paste from the bug report)

PAM seems indeed reponsible for this. When useradd or groupadd is
used, PAM checks for permissions for the user. If there's no pam file
for useradd or/and for groupadd, default is to ask for password
(although it could be to deny access on some boxes, depending on the
settings.)

The solution is to add useradd (which is created by shadow), and
groupadd (which is not created), whith something like :

auth sufficient pam_rootok.so
auth required pam_unix_auth.so
account required pam_unix.so
session required pam_unix.so
password required pam_permit.so

the pam_rootok line will allow authentication without asking for
password if user is root. May be groupadd should be added to shadow to
solve this issue.


On Fri, 3 Dec 2004 13:53:48 -0600 (CST), Christopher Dombroski
<cdombroski AT gambit.gotdns.org> wrote:
> It looks like whatever you did for useradd works, but you haven't done it
> for groupadd which has the same problem.
>
> On Fri, December 3, 2004 7:58, Jackson Alley said:
> > I am definitly running as root when I cast -c openssh, and I just tried a
> > cast -r -c shadow but I am useing PAM. The thing is it doesn't need the
> > root password, infact I've just been leaving it blank, but notice the
> > groupadd and useradd errors below. I don't think I changed any PAM
> > settings and like I said it doesn't fail, so it's not the end of the
> > world, just sits wainting on a return which as of late can be a long time
> > coming. I also tried a chmod -x /etc/pam.d/useradd but no effect. Thanks,
> > Jackson
> >
> > [08:44:51]toomanymirrors: ~ # cast -c openssh
> > Computing previously installed dependencies...
> > openssh preparing environment...
> > openssh checking dependencies...
> > openssh depends on zlib
> > openssh depends on openssl
> > openssh optionally depends on tcp_wrappers
> > openssh optionally depends on Linux-PAM
> > openssh optionally depends on krb5
> > zlib No work to do.
> > openssl No work to do.
> > tcp_wrappers No work to do.
> > Linux-PAM No work to do.
> > Collating dependencies...
> > Spells are to be cast:
> > ---------------------------
> > openssh
> >
> > Do you want to cast these spells? [y]
> >
> >
> > make: Circular cups <- espgs dependency dropped.
> > make: Circular samba <- cups dependency dropped.
> > make: Circular tk <- xorg dependency dropped.
> > make: Circular gtk+ <- xorg dependency dropped.
> > Found source file openssh-3.9p1.tar.gz for spell openssh in
> > /var/spool/sorcery
> > Waiting for any Solo casts to complete...
> > Waiting for any other casts of openssh to complete... done.
> > Building openssh
> > Unpacking source file openssh-3.9p1.tar.gz for spell openssh.
> > Do you wish to add -- options to ./configure? [n]
> >
> > Using gcc version: 3.3.3
> > Installing in dir: /usr/src/openssh-3.9p1
> > openssh 3.9p1
> > Password:
> > groupadd: PAM authentication failed
> > useradd: user sshd exists
> > The user name sshd already exists, so continuing...
> >
> >
> > On Thu, 2 Dec 2004 22:20:00 -0800
> > Eric Sandall <eric AT sandall.us> wrote:
> >
> >> Quoting Arjan Bouter <a_bouter AT ezrs.com>:
> >> > hmm, casting shadow again solved this for me.
> >> > might be worth a shot...
> >> >
> >> > Arjan
> >>
> >> It didn't for me (casting postgresql). :(
> >>
> >> -sandalle
> >>
> >> --
> >> Eric Sandall | Source Mage GNU/Linux Developer
> >> eric AT sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
> >> http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
> >> http://counter.li.org/ #196285 | http://www.shock.wsu.edu/
> >>
> >> ----------------------------------------------------------------
> >> This message was sent using IMP, the Internet Messaging Program.
> >> _______________________________________________
> >> SM-Discuss mailing list
> >> SM-Discuss AT lists.ibiblio.org
> >> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> >
> >
> > !DSPAM:41b07111110814034816602!
> > _______________________________________________
> > SM-Discuss mailing list
> > SM-Discuss AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> >
> >
> > !DSPAM:41b07111110814034816602!
> >
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>


--
Tommy,
- Oh un nouveau range-CD !
- Oh un nouveau canapé !
- Oh une nouvelle lampe !
- Euh ... Oh un nouveau range-CD !




Archive powered by MHonArc 2.6.24.

Top of Page