Login/PAM errors

PsypherPunk · 09-08-2005, 04:56 AM

i am no longer able to login via KDM (or XDM, or...). After entering the correct login details i receive an error and a message telling me to check the logs. Therein:

Code:

PAM _pam_load_conf_file: unable to open /etc/pam.d/common-account
PAM _pam_load_conf_file: unable to open /etc/pam.d/common-password
PAM _pam_load_conf_file: unable to open /etc/pam.d/common-session

...which is correct as the above files do not exist. Should they? i've installed the latest version of PAM and associated packages via RPM.

Matir · 09-08-2005, 10:12 PM

Give this a try:

Code:

grep -Hr common- /etc/pam.d/*

It should show if the other pam files reference it anywhere.

PsypherPunk · 09-09-2005, 02:39 AM

This is the output from that:

Code:

/etc/pam.d/gnomesu-pam:auth     include        common-auth
/etc/pam.d/gnomesu-pam:account  include        common-account
/etc/pam.d/gnomesu-pam:password include        common-password
/etc/pam.d/gnomesu-pam:session  include        common-session
/etc/pam.d/xdm:auth     include        common-auth
/etc/pam.d/xdm:account  include        common-account
/etc/pam.d/xdm:password include        common-password
/etc/pam.d/xdm:session  include        common-session

Errr...not too sure what that means

i found this this reference in a SuSE Admin. Guide which seems to detail the contents of the file. Might give that a whirl and see what happens.

Matir · 09-09-2005, 10:53 AM

This means that it's trying to "include" the file /etc/pam.d/common-* at those points. I would adjust those config files or create the common-* files. I have no common-* files on my gentoo box.
/etc/pam.d/xdm on my box contains:

Code:

#%PAM-1.0
auth       required     /lib/security/pam_stack.so service=system-auth
auth       required     /lib/security/pam_nologin.so
account    required     /lib/security/pam_stack.so service=system-auth
password   required     /lib/security/pam_stack.so service=system-auth
session    required     /lib/security/pam_stack.so service=system-auth
session    optional     /lib/security/pam_console.so

/etc/pam.d/system-auth contains:

Code:

#%PAM-1.0

auth       required     /lib/security/pam_env.so
auth       sufficient   /lib/security/pam_unix.so likeauth nullok
auth       required     /lib/security/pam_deny.so

account    required     /lib/security/pam_unix.so

password   required     /lib/security/pam_cracklib.so retry=3
password   sufficient   /lib/security/pam_unix.so nullok md5 shadow use_authtok
password   required     /lib/security/pam_deny.so

session    required     /lib/security/pam_limits.so
session    required     /lib/security/pam_unix.so