Hi, A configuration change is something that I will be looking out for, just as long as I know that the config files are relevant. -David <div>On 6/26/07, Tobias Schaefer <<a href="mailto:T.Schaefer@science-computing.de">T.Schaefer@science-computing.de</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Hi, > I don't follow you. PAM is not a service but a library (with plugins in > the form of shared objects - .so files). You don't simply disable PAM. > Take the /bin/login program - it is used for login at the console. Try to > run ldd /bin/login and see that this program is linked with libpam.so. > Then check /etc/pam.d/login to see how login is using PAM. on the other hand sshd could stop PAM authentication due to a configuration change. The library would still be linked in, but its code would no longer be executed. (The same could happen with apache and other programs.) You could configure a logging module into the PAM stack. Some 10 years ago I wrote such a module to debug PAM problems. The module is still available via <a href="http://www.rz.uni-hohenheim.de/~schaefer/linux/pam/index.html">http://www.rz.uni-hohenheim.de/~schaefer/linux/pam/index.html</a>. But it probably won't compile out of the box since it was only tested with Linux distributions that have long since passed away. Tobias -- Tobias Schaefer Phone 07071-9457-406 science + computing ag FAX 07071-9457-411 Hagellocher Weg 73 D-72070 Tuebingen Email: <a href="mailto:T.Schaefer@science-computing.de">T.Schaefer@science-computing.de</a> WWW: <a href="http://www.science-computing.de/">http://www.science-computing.de/ </a> -- Vorstand/Board of Management: Dr. Bernd Finkbeiner, Dr. Florian Geyer, Dr. Roland Niemeier, Dr. Arno Steitz, Dr. Ingrid Zech Vorsitzender des Aufsichtsrats/ Chairman of the Supervisory Board: Prof. Dr. Hanns Ruder Sitz/Registered Office: Tuebingen Registergericht/Registration Court: Stuttgart Registernummer/Commercial Register No.: HRB 382196 _______________________________________________ Pam-list mailing list <a href="mailto:Pam-list@redhat.com">Pam-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pam-list">https://www.redhat.com/mailman/listinfo/pam-list</a> </blockquote></div>