GNOME authenticating through PAM?

[Chris Kosanovich]

I have GNOME up and running but now i am installing PAM to handle the authentication and when i try to log in through GDM whenever i put in a user name it says that authentication failed before it even asks for a password. Now i assume that this is because the passwd file has an invalid character for all the passwords like it should, but is there any way to get GDM to work with pam on HPUX?
Thanks

[Jeff Schussele]

Hi Chris,

See the following thread & it's link - states that 1.2 has trouble currently w/trusted systems & that 1.4 is supposed to fix it. But it does have a possible work-around

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x2c567bb04b5cd611abdb0090277a778c,00.html

BTW - I searched the forum with "Gnome + PAM"

HTH,
Jeff

[Chris Kosanovich]

Thanks for the link (actually i had searched with that exact string and had read that post) the thing is (and i am relatively new to HPUX) but the machines are not trusted.

I already did a tsconvert -r and have set up PAM instead. Now as i understand it trusted systems use separate passwd files for each user and it uses the shadow file while PAM just has one passwd file with all the user info (but has an invalid character * for passwords.) Is this simply the same problem as with trusted systems where it won't work and we have to either start GNOME through the .dtlogin or is there some way to get it to see the PAM files? Incidentaly in that link that you sent me one you responded that

"1) Your system was using some sort of "extra" auth (SSH, PAM, etc.) before you installed Gnome & Gnome needs to be made aware of it. "

so my question is how do you make GNOME "aware" of the extra auth?

Thanks again for the help

-Chris

[Chris Kosanovich]

Also i enabled logging to see what was happening and my log file prints out

May 22 12:28:03 ginko gdm[6568]: load_modules: can not open module /usr/lib/security/pam_smb_auth.1
May 22 12:28:03 ginko gdm[6568]: Couldn't authenticate root

that is what happens when you try to enter any user name, it immediatly sais that authentication failed. I checked the file and it has 555 on perms.
Any ideas?

-Chris

[Jeff Schussele]

Hi Chris,

What does your /etc/pam.conf file look like?
Do you have the PAM lib files /usr/lib/libpam.1,
/usr/lib/security/libpam_dce.1 & /usr/lib/security/libpam_unix.1 ?
Are you authenticating down to the user level?
If so, do you have an /etc/pam_user.conf AND the
login auth required /usr/lib/security/libpam_udpbe.1
line AHEAD of the libpam_unix.1 line in /etc/pam.conf?
Do you have CIFS 9000 or SAMBA on this system?
Almost looks likes it's trying to authenticate for it - the lib_smb_auth.1 file looks like that - could be just me though.
If not using CIFS/SAMBA you should remove that service name from the /etc/pam.conf file.

HTH,
Jeff