[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Pam+NIS+passwd



On Wed, Feb 20, 2002 at 05:45:49PM +0100, Thorsten Kukuk wrote:
 
Hello Thorsten, thanks for the quick reply,

> Why not use pam_pwcheck?
> 
I don't know much of this module and same as with pam_pwdb I can't get
much information about it, while pam_cracklib is included with the pam
distribution.

> > -The debug option described in the documentation doesn't work and causes an
> >  error through syslog:
> > 
> >  petrel PAM-unix2[2880]: password: Unknown option: debug
> 
> Fixed on current SuSE Linux distributions.
> 
That's good

> > -When a password is changed successfully there is no record through syslog.
> 
> Why should there a syuslog entry on the client? It is much simpler to 
> have this all on the server.
> 
I personally like the entries that pam_unix leaves in syslog: 

petrel PAM_unix[672]: NIS Password for tale was changed on albatros

And in the case of a local accounts there is no trace of a change at all,
but all in all this is not so important, there are many other more
serious things in the logs that I don't check anyway.
> > 
> > -The option use_authok described in the documentation and essential for
> >  this situation is not supported giving the following error through syslog:
> > 
> >  petrel PAM-unix2[3501]: password: Unknown option: use_authok
>                                                    
> Typo of the README, the source and all other modules should show you that
> the correct argument is "use_authtok"
> 
I changed and now it works.

> > -The module doesn't work at all when it is stacked with pam_cracklib, and
> >  again this is essential for the described situation.
> 
> It should work, but I prefer pam_pwcheck instead of pam_cracklib.
> 
Yes, you are right, the problem was a misconfigured cracklib.
After this new information and changes the sistem is working as spected,
I have to finish configuring everything and then should repost my mail.

Thanks again.

>   Thorsten
> 
> -- 
> Thorsten Kukuk       http://www.suse.de/~kukuk/        kukuk@suse.de
> SuSE Linux AG        Deutschherrenstr. 15-19       D-90429 Nuernberg
> --------------------------------------------------------------------    
> Key fingerprint = A368 676B 5E1B 3E46 CFCE  2D97 F8FD 4E23 56C6 FB4B





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []