Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 02 Apr 2008 12:10:15 -0400
From:      Chuck Robey <chuckr@chuckr.org>
To:        Dan Nelson <dnelson@allantgroup.com>
Cc:        FreeBSD-Questions@freebsd.org
Subject:   Re: some pam problem?
Message-ID:  <47F3AFE7.5010209@chuckr.org>
In-Reply-To: <20080402024022.GB29501@dan.emsphone.com>
References:  <47F2DC8B.1080407@chuckr.org> <20080402024022.GB29501@dan.emsphone.com>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dan Nelson wrote:
> In the last episode (Apr 01), Chuck Robey said:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> I can't figure out what this message below means to me:
>>
>> Mar 31 17:12:02 april sshd[26150]: in openpam_dispatch(): pam_nologin.so: no pam_sm_authenticate()
>>
>> I have guessed it meant I had something wrong with my login.access,
>> but I wasn't able to find anything that looked odd to me.  Anyone
>> know what this message above might mean?
>

I had guessed (it was sort of obvious) that it was those files, but I missed
that UPDATING message.  It's a new machine, but the way I got to current was to
boot 6.1 and then to make world.  Anyhow, the error rainstorm has blown itself
out, thanks!


> Is this an old machine that has been upgraded?  From /usr/src/UPDATING:
> 
> 20070610:
>         The pam_nologin(8) module ceases to provide an authentication
>         function and starts providing an account management function.
>         Consequent changes to /etc/pam.d should be brought in using
>         mergemaster(8).  Third-party files in /usr/local/etc/pam.d may
>         need manual editing as follows.  Locate this line (or similar):
> 
>                 auth    required        pam_nologin.so  no_warn
> 
>         and change it according to this example:
> 
>                 account required        pam_nologin.so  no_warn
> 
>         That is, the first word needs to be changed from "auth" to
>         "account".  The new line can be moved to the account section
>         within the file for clarity.  Not updating pam.conf(5) files
>         will result in nologin(5) ignored by the respective services.
> 
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH86/nz62J6PPcoOkRAlawAJ9oMqXV1CRF9JpGyt0ZVtEhFcS3vQCfROW6
cw16sWd5hmVIQLyC+ReVpm8=
=j/es
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47F3AFE7.5010209>