HI,

i am working around with pam.

in the documentation i read that

" This line makes sure that if the user is trying to log in as root, the tty on which they are logging in is listed in the /etc/securetty file, if that file exists"

ok the file exists but i dont know if the tty of the gdm is listed in it or not.

i have red hat 9.0

when i do ps-ae i get this( irrelevant entries have been not listed here by me

3313 tty1 00:00:00 mingetty
3314 tty2 00:00:00 mingetty
3315 tty3 00:00:00 mingetty
3316 tty4 00:00:00 mingetty
3317 tty5 00:00:00 mingetty
3318 tty6 00:00:00 mingetty
3319 ? 00:00:00 gdm-binary
3368 ? 00:00:00 gdm-binary
3369 ? 00:00:41 X

my securetty file looks like this


vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11


now the problem is that when ever i try to change the file gdm in the /etc/pam.d directory for using single sign on using winbind root cannot login through the GUI prompt.

but i remove the line

auth required /lib/security/pam_securetty.so

it starts working.

but my questions is that this line mentioned above is still very much there in my gdm file and things are working. but when i try to change it root stops logging in.

is the tty entry missing in securetty?

can any one send me his gdm file where he has used winbind for a single sign on?

auth required /lib/security/pam_securetty.so

Try typing "tty" at the prompt and it should tell you.