Bug 149808 - /etc/pam.d/login not updated by system-config-authentication
/etc/pam.d/login not updated by system-config-authentication
Status: CLOSED NOTABUG
Product: Fedora
Classification: Fedora
Component: authconfig (Show other bugs)
3
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Tomas Mraz
Brian Brock
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2005-02-27 10:04 EST by Philippe A
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2005-02-28 02:36:35 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Philippe A 2005-02-27 10:04:23 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041107 Firefox/1.0

Description of problem:
I had a hard time having a Linux client authenticate against samba
with winbind. I eventually found it's because pam was not instructed
to auth with pam_winbind.so in /etc/pam.d/login. Would be great
system-config-authentication took care of that too!

Version-Release number of selected component (if applicable):
authconfig-4.6.5-3.1

How reproducible:
Always

Steps to Reproduce:
1. Run system-config-authentication to enable winbind auth.
2. Have a look into /etc/pam.d/login
    

Actual Results:  /etc/pam.d/login has no reference to pam_winbind.so


Expected Results:  
#%PAM-1.0
auth       required     pam_securetty.so
auth        sufficient   pam_winbind.so
auth        sufficient   pam_unix.so use_first_pass
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
account     sufficient   pam_winbind.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_stack.so service=system-auth
session    optional     pam_console.so
# pam_selinux.so open should be the last session rule
session    required     pam_selinux.so multiple open


Additional info:
Comment 1 Tomas Mraz 2005-02-28 02:36:35 EST
This is not right - authconfig updates only the system-auth file and
that's right - note that every other service stack file includes the
system-auth stack by calling the pam_stack.so. 
I suppose there is something wrong with your configuration if the
standard way doesn't work for you.

Note You need to log in before you can comment on or make changes to this bug.