some pam problem?
Chuck Robey
chuckr at chuckr.org
Wed Apr 2 16:16:29 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dan Nelson wrote:
> In the last episode (Apr 01), Chuck Robey said:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> I can't figure out what this message below means to me:
>>
>> Mar 31 17:12:02 april sshd[26150]: in openpam_dispatch(): pam_nologin.so: no pam_sm_authenticate()
>>
>> I have guessed it meant I had something wrong with my login.access,
>> but I wasn't able to find anything that looked odd to me. Anyone
>> know what this message above might mean?
>
I had guessed (it was sort of obvious) that it was those files, but I missed
that UPDATING message. It's a new machine, but the way I got to current was to
boot 6.1 and then to make world. Anyhow, the error rainstorm has blown itself
out, thanks!
> Is this an old machine that has been upgraded? From /usr/src/UPDATING:
>
> 20070610:
> The pam_nologin(8) module ceases to provide an authentication
> function and starts providing an account management function.
> Consequent changes to /etc/pam.d should be brought in using
> mergemaster(8). Third-party files in /usr/local/etc/pam.d may
> need manual editing as follows. Locate this line (or similar):
>
> auth required pam_nologin.so no_warn
>
> and change it according to this example:
>
> account required pam_nologin.so no_warn
>
> That is, the first word needs to be changed from "auth" to
> "account". The new line can be moved to the account section
> within the file for clarity. Not updating pam.conf(5) files
> will result in nologin(5) ignored by the respective services.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFH86/nz62J6PPcoOkRAlawAJ9oMqXV1CRF9JpGyt0ZVtEhFcS3vQCfROW6
cw16sWd5hmVIQLyC+ReVpm8=
=j/es
-----END PGP SIGNATURE-----
More information about the freebsd-questions
mailing list