[SOLVED] Add NIS User to video Group via PAM

LarryResch · 07-13-2012, 06:21 AM

I need to add users who authenticate via NIS to the video group in order to use the nvidia driver's ability to direct render for VMware Player. I have added
auth optional pam_group.so
to /etc/pam.d/login and /etc/pam.d/xdm, and I have added
*;*;*;Al000-2400;video
to /etc/security/group.conf

Everything I can find indicates that this should work, but when I log in as an NIS user, I am still get an access denied for the nvidia device. (the device is owned by root and the group video, others have no rights.)

-L

Reuti · 07-16-2012, 08:03 AM

Is there a zero missing in the time specification?

You checked the assigned groups with id?

LarryResch · 07-16-2012, 08:25 AM

yes - that was a transcription typo on my end - the syntax is correct on the real system.
id does not show the video group - only the groups set by NIS. Could the problem be in my nswitch.conf file? group is set to file,nis

LarryResch · 07-16-2012, 10:17 AM

I added
auth optional pam_group.so
to /etc/pam.d/xdm again and after logging out/back in, I was able to see that video group is part of the user id. Not sure why it is now working...

Reuti · 07-16-2012, 12:24 PM

For passwd, group and shadow often compat is used as setting. Maybe it will help here too. On a local machine it’s sufficient to add pam_group.so to xdm (but I set it to required), I can’t say for NIS.