I have a peculiar problem. I have been messing with samba configuration (authenticating against an LDAP server - yikes) - and now whenever i log in via the x interface OR when i try to authenticate as su after logging in via ssh2, i am asked for my password twice. anybody have any ideas? this does NOT happen when logging in via ssh, btw - only when i'm already logged in and trying to use su powers.

tia

If you su as a user, your then logged in as that user.. so if your trying to access a Samba share as that user, that's why its asking for authentication once again, as that user.

Whenever you su, your logging in as that user, so you have to authenticate. The only user that it won't prompt a password for is when your root and su to another user, etc.

sorry, i didn't make myself clear.

when i log in to x (not samba), it asks for the username once, and the password twice. it only logs in after the password has been put in twice. it only looks at the second password for authentication, as i can put anything in for the first password and not receive an error message.

when i log in via ssh, it asks for the username and password once (after authenticating against my key)

however, when i'm logged in a ssh shell, and try to su, it asks for the su password twice. again, it only looks at the second password for authentication.

on any other system (even those running samba), when i log in to x or su after i'm in ssh, it only asks for the password once.

does that make any better sense?

Have you resolved the problem?
If yes: how?

I have the identical problem and no idea, how to cure it

How is your PAM setup?
Depending on your distro, it will be located in /etc/pam.d/auth or /etc/pam.d/system-auth
If you are using LDAP authetication, you should only have sufficient across from pam_unix.so and pam_ldap.so
You will probably find that you have required beside pam_unix.so

My Distro ist Ubuntu.

I use it as a mailserver(Zimbra) and Samba-Server, utilising LDAP for user-management.
PAM setup is in /etc/pam.d/common-auth and is already:

auth sufficient pam_ldap.so
auth sufficient pam_unix.so


What else could be the problem?

thanx in advance ...

Can you post the full common-auth?

I already did: The two lines above are the whole content of the file.

Hi,

I also have the same problem..
Please help me if you have already solved it?

try this
auth sufficient pam_ldap.so use_first_pass
auth required pam_unix.so nullok_secure use_first_pass