[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Wheel module with trust doesn't work (?)

Sorry to have not put enough info.  Here's my original mail:
When I put this line at the top of the 'su' PAM configuration:
	auth       sufficient  /lib/security/pam_wheel.so trust

I (in group wheel, gid=0) am prompted for a password when using su.

When I change it to this line:

	auth    sufficient  /lib/security/pam_wheel.so trust bug-workaround

(or any invalid keyword in place of bug-workaround), it works correctly (i.e.,
it doesn't prompt me for a password).  I think the non-"trust" case fails in a
similar way.

Andrew required my /etc/pam.d/su file.  Hope it's sufficient 		:-)

auth       sufficient   /lib/security/pam_wheel.so trust bug-workaround
auth       required     /lib/security/pam_pwdb.so shadow nullok
account    required     /lib/security/pam_pwdb.so
password   required     /lib/security/pam_cracklib.so
password   required     /lib/security/pam_pwdb.so shadow use_authtok nullok
session    required     /lib/security/pam_pwdb.so

As I have recently rediscovered, it's hard for me to find my own boneheaded
errors, so please feel free to point them out to me.

	-- Alan Robertson

Steve Colie patriotically wrote:
> On Wed, 11 Mar 1998, Andrew Morgan wrote:
> >alanr@bell-labs.com writes:
> > > I sent this out a few days ago, but received no response.  Did
> > > others get it? Should I have sent it to another list instead?
> >
> >I was hoping someone with a 5.0 system would respond to this.  I think
> >it would help a lot if you supplied your whole config file for 'su'.
> >Giving a line in isolation makes things a little vague.
> I haven't been keeping up with this.  What's the problem?
> -- 
>     Steve Coile
>  scoile@patriot.net

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []