Or it could be selinux you may want to check your audit log. And just incase you are not familiar with selinux the audit2allow tool along with the fixfiles tool are really simple <div class="gmail_quote">On May 1, 2012 5:42 PM, "Parsons, Aron" <<a href="mailto:parsonsa@bit-sys.com">parsonsa@bit-sys.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> It should still work fine; the 1.7 upgrade didn't break the two servers I have using winbind. Remember that the process doing the PAM conversation is non-root unlike most other PAM-enabled services, so it may just be a simple permissions issue. The likely culprit is the system keytab if you have Kerberos enabled. /aron -----Original Message----- Message: 1 Date: Tue, 1 May 2012 13:46:31 -0400 From: "Brown, Rodrick" <<a href="mailto:rbrown@knight.com">rbrown@knight.com</a>> To: "<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>" <<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>> Subject: [Spacewalk-list] PAM winbind support Message-ID: <<a href="mailto:C9C3C7FC93B40A4DA409F4B1ACB610991DBDFDEE7C@EXCHANGE10.global.knight.com">C9C3C7FC93B40A4DA409F4B1ACB610991DBDFDEE7C@EXCHANGE10.global.knight.com</a>> Content-Type: text/plain; charset="us-ascii" Does spacewalk 1.7 still support PAM w/winbind ? After doing an upgrade to 1.7 I'm getting the following error in my tomcat logs 2012-05-01 13:39:07,267 [TP-Processor2] WARN com.redhat.rhn.domain.user.legacy.UserImpl - PAM login for user User XXXXX (id 25, org_id 1) failed with error Authentication failure. I'm no longer able to login via spacewalk web with my PAM winbind setup. If I disable PAM authentication works fine. --RB _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> </blockquote></div>