Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 4 Mar 2000 23:24:15 +0100 (CET)
From:      Dominik Brettnacher <domi@saargate.de>
To:        "ndear@areti.net" <ndear@areti.net>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Weird error messages on screen
Message-ID:  <Pine.BSF.4.10.10003042322300.9595-100000@dominik.saargate.de>
In-Reply-To: <fc.3b9aca00602e27403b9aca00b18b905f.245c63@saargate.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 4 Mar 2000, ndear@areti.net wrote:

> >> > Everytime someone telnets in and logs in, I get the following error
> >on the 
> >> > console screen:
> >> > machine_name login: no modules loaded for 'login' service
> >> > machine_name login: auth_pam: Permission denied
> >> What does your /etc/pam.conf look like?
> It's blank/empty.

Maybe you should create one like this (you can find it at
/usr/src/etc/pam.conf):

# Configuration file for Pluggable Authentication Modules (PAM).
#
# This file controls the authentication methods that login and other
# utilities use.  See pam(8) for a description of its format.
#
# Note: the final entry must say "required" -- otherwise, things don't
# work quite right.  If you delete the final entry, be sure to change
# "sufficient" to "required" in the entry before it.
#
# $FreeBSD: /ctm/FreeBSD/anoncvs/cvs/src/etc/pam.conf,v 1.1.2.1 2000/01/06 13:57:58 markm Exp $

# If the user can authenticate with S/Key, that's sufficient; allow clear
# password. Try kerberos, then try plain unix password.
login	auth	sufficient	pam_skey.so
login	auth	requisite	pam_cleartext_pass_ok.so
#login	auth	sufficient	pam_kerberosIV.so		try_first_pass
login	auth	required	pam_unix.so			try_first_pass

# r-utils are broken; ensure this doesn't bother folk
rshd	auth	sufficient	pam_deny.so

# Don't break startx
xserver	auth	required	pam_permit.so

# XDM is difficult; it fails or moans unless there are modules for each
# of the four management groups; auth, account, session and password.
xdm	auth	required	pam_unix.so
#xdm	auth	sufficient	pam_kerberosIV.so		try_first_pass
xdm	account	required	pam_unix.so			try_first_pass
xdm	session	required	pam_deny.so
xdm	password required	pam_deny.so

# If we don't match anything else, default to using getpwnam().
other	auth	required	pam_unix.so			try_first_pass
other	account	required	pam_unix.so			try_first_pass

-- 
Dominik - http://www.saargate.de/~domi/



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10003042322300.9595-100000>