Description of problem: If you've for example the following situation: --- /dev/null 2005-08-30 23:51:26.920796000 +0200 +++ /etc/security/console.apps/yum 2005-10-06 00:14:48.000000000 +0200 @@ -0,0 +1,4 @@ +USER=root +PROGRAM=/usr/sbin/yum +GUI=no +SESSION=true --- /dev/null 2005-08-30 23:51:26.920796000 +0200 +++ /etc/pam.d/yum 2005-10-06 00:14:48.000000000 +0200 @@ -0,0 +1,8 @@ +#%PAM-1.0 +auth sufficient pam_rootok.so +auth sufficient pam_timestamp.so +auth include service=system-auth +session required pam_permit.so +session optional pam_xauth.so +session optional pam_timestamp.so +account required pam_permit.so then consolehelper won't work at calling yum as non-root user (symlink from yum to consolehelper has to exist, of course). But if you've got: --- /dev/null 2005-08-30 23:51:26.920796000 +0200 +++ /etc/pam.d/yum 2005-10-06 00:14:48.000000000 +0200 @@ -0,0 +1,8 @@ +#%PAM-1.0 +auth sufficient pam_rootok.so +auth sufficient pam_timestamp.so +auth required pam_stack.so service=system-auth +session required pam_permit.so +session optional pam_xauth.so +session optional pam_timestamp.so +account required pam_permit.so then consolehelper will work. But last method (using pam_stack.so) is (will be) deprecated and obsoleted, as Tomas Mraz wrote at fedora-devel-list (see archives/fedora-devel-list/2005-October/msg00050.html). Version-Release number of selected component (if applicable): usermode-1.81-1 pam-0.80-9 How reproducible: Everytime, see above. Actual results: consolehelper doesn't work as expected Expected results: consolehelper should work as expected
Ok, this looks like a PAM thing, reassigning to PAM. If not, please reassign back.
You have the syntax wrong. Use: 'auth include system-auth' Also the configuration utilites should use this simple pam config instead of explicitely calling pam_timestamp and so on: #%PAM-1.0 auth include config-util account include config-util session include config-util The config-util file is provided by pam >= 0.80-9