From owner-freebsd-stable Mon Aug 13 14: 5:39 2001 Delivered-To: freebsd-stable@freebsd.org Received: from crotus.sc.intel.com (scfdns02.sc.intel.com [143.183.152.26]) by hub.freebsd.org (Postfix) with ESMTP id 0587B37B40E for ; Mon, 13 Aug 2001 14:05:35 -0700 (PDT) (envelope-from jreynold@sedona.ch.intel.com) Received: from sedona.intel.com (sedona.ch.intel.com [143.182.218.21]) by crotus.sc.intel.com (8.9.1a+p1/8.9.1/d: relay.m4,v 1.41 2001/07/09 21:06:22 root Exp $) with ESMTP id VAA29701; Mon, 13 Aug 2001 21:05:24 GMT Received: from hip186.ch.intel.com (hip186.ch.intel.com [143.182.225.68]) by sedona.intel.com (8.9.1a/8.9.1/d: sendmail.cf,v 1.14 2001/01/02 18:39:59 steved Exp $) with ESMTP id OAA15185; Mon, 13 Aug 2001 14:05:23 -0700 (MST) X-Envelope-From: jreynold@sedona.ch.intel.com Received: (from jreynold@localhost) by hip186.ch.intel.com (8.9.1a/8.9.1/d: client.m4,v 1.3 1998/09/29 16:36:11 sedayao Exp sedayao $) id RAA13263; Mon, 13 Aug 2001 17:05:27 -0400 (EDT) X-Authentication-Warning: hip186.ch.intel.com: jreynold set sender to jreynold@sedona.ch.intel.com using -f From: John Reynolds~ MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15224.16657.969799.851067@hip186.ch.intel.com> Date: Mon, 13 Aug 2001 14:05:21 -0700 To: BigStar Cc: stable@FreeBSD.ORG Subject: Re: Problem after update. In-Reply-To: References: X-Mailer: VM 6.93 under Emacs 20.7.2 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG [ On Monday, August 13, BigStar wrote: ] > I just update my box from 4.3 to 4.4-PRERELEASE and when i log to machine > i get on error console: > Aug 13 22:54:40 152-mia-1 login: no modules loaded for `login' service > Aug 13 22:54:40 152-mia-1 login: pam_open_session: Permission denied > Aug 13 22:54:40 152-mia-1 login: pam_open_session: Permission denied > > in /etc/pam.conf i have > login auth sufficient pam_skey.so > login auth requisite pam_cleartext_pass_ok.so > #login auth sufficient pam_kerberosIV.so try_first_pass > login auth required pam_unix.so try_first_pass > > BS. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message After upgrading over the weekend and doing a proper mergemaster(1), I get this in /etc/pam.conf (for login) # If the user can authenticate with S/Key, that's sufficient; allow clear # password. Try kerberos, then try plain unix password. login auth sufficient pam_skey.so login auth requisite pam_cleartext_pass_ok.so #login auth sufficient pam_kerberosIV.so try_first_pass login auth required pam_unix.so try_first_pass login account required pam_unix.so #login account required pam_kerberosIV.so #login session required pam_kerberosIV.so login password required pam_permit.so login session required pam_permit.so No problems. -Jr -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | John Reynolds WCCG, CCE, (space for rent, cheap!) | | Intel Corporation MS: CH6-210 Phone: 480-554-9092 pgr: 602-868-6512 | | jreynold@sedona.ch.intel.com http://www-aec.ch.intel.com/~jreynold/ | =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message