From owner-freebsd-questions@FreeBSD.ORG Wed Nov 30 11:29:12 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B71B16A420 for ; Wed, 30 Nov 2005 11:29:12 +0000 (GMT) (envelope-from ml.diespammer@netfence.it) Received: from parrot.aev.net (parrot.aev.net [212.31.247.179]) by mx1.FreeBSD.org (Postfix) with ESMTP id 91FA543D5E for ; Wed, 30 Nov 2005 11:29:05 +0000 (GMT) (envelope-from ml.diespammer@netfence.it) Received: from soth.ventu (adsl-ull-229-137.51-151.net24.it [151.51.137.229]) (authenticated bits=128) by parrot.aev.net (8.13.5/8.13.5) with ESMTP id jAUBhFGE087273 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 30 Nov 2005 12:43:21 +0100 (CET) (envelope-from ml.diespammer@netfence.it) Received: from [10.1.2.18] (alamar.ventu [10.1.2.18]) (authenticated bits=0) by soth.ventu (8.13.5/8.13.3) with ESMTP id jAUBRbGS080929 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 30 Nov 2005 12:27:38 +0100 (CET) (envelope-from ml.diespammer@netfence.it) Message-ID: <438D8CED.2030502@netfence.it> Date: Wed, 30 Nov 2005 12:28:45 +0100 From: Andrea Venturoli User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051109) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Jason Williams , freebsd-questions@freebsd.org References: <438891E6.7040706@netfence.it> <54EAAF7C-8514-44CE-B2DB-7C6BDE93D2FF@seanet.com> In-Reply-To: <54EAAF7C-8514-44CE-B2DB-7C6BDE93D2FF@seanet.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.53 on 212.31.247.179 X-Scanned-By: MIMEDefang 2.53 on 10.1.2.13 Cc: Subject: Re: KDE and PAM X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2005 11:29:12 -0000 Jason Williams wrote: > Andrea, > > The freebsd website has a excellent section on the pam module that > REALLY helped me out. I believe you will find the answer in there. Here > is a link: > > http://www.freebsd.org/doc/en_US.ISO8859-1/articles/pam/index.html > > I would suggest that you probably need something like the following for > the auth section in /etc/pam.conf (FreeBSD 5.4) or in /etc/pam.d/ system > (FreeBSD 6): > > # auth > auth required pam_nologin.so no_warn > #auth sufficient pam_krb5.so no_warn > try_first_pass > #auth sufficient pam_ssh.so no_warn > try_first_pass > auth sufficient pam_unix.so no_warn > try_first_pass > auth required /usr/local/lib/pam_smb_auth.so > > The "required" for pam_smb_auth.so will stop login from authenticating > without a password. Yes, thank you very much, that solved!!! I guess I really never got to understand PAM fully... maybe it's time to read that document carefully :) bye & Thanks av.