Module can't get PAM_AUTHTOK

[Luís Eterovick]

Hello,

im calling the following module in /etc/pam.d/common-auth:

*auth    optional        pam_krb5_migrate.so debug*

and this module is supposed to create a Kerberos principal using login
credentials, but it fails when trying to retrieve *PAM_AUTHTOK* into
variable *pass* with the following part of the code:

*retval = pam_get_item(pamh, PAM_AUTHTOK, (const void **)&pass);

if (retval != PAM_SUCCESS) {
    ...
} else if (pass == NULL) {
    retval = PAM_AUTHTOK_RECOVER_ERR;
    goto cleanup;
}

*the module seems to be ok, but I'm not sure if i missed something in pam
configuration, or if the way I use it is wrong.

*/var/log/auth.log*
**Aug  5 13:55:07 luist login(pam_krb5_migrate)[2374]: Authenticating as
principal pam_migrate/myhostname at MYREALM with keytab
/etc/security/pam_krb5.keytab.
Aug  5 13:55:07 luist login(pam_krb5_migrate)[2374]: username [luist]
obtained
Aug  5 13:55:10 luist login[2374]: pam_unix(login:session): session opened
for user luist by LOGIN(uid=0)
Aug  5 13:55:10 luist dbus-daemon: Rejected send message, 1 matched rules;
type="method_call", sender=":1.29" (uid=5312 pid=3761
comm="/usr/lib/indicator-applet/indicator-applet --oaf-a")
interface="org.freedesktop.DBus.Properties" member="Get" error
name="(unset)" requested_reply=0 destination=":1.45" (uid=0 pid=2374
comm="/bin/login --       "))

How can i make this work?
Thanks in advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20090805/23f234b6/attachment.htm>