Is it a bug of Pam or what ?

[Stuart Sears]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ratna Kumar wrote:
> I'm recently faced very strange problem on PAM service on RHEL 4. I had
> to to allow user1 user2 and user3 to login only between 9 AM to 17 PM
> everyday. To do this I did the following:
> 
> 1) vi /etc/security/time.conf
> 
> login;*;user1|user2| user3;Al0900-1700
> 
> 2) vi /etc/pam.d/login
> account required pam_time.so
> 
> This setting prevented user1 user2 and user3 to login to the system
> other than 9AM to 17 PM. But the strange thing happened is All the users
> with the name matching "user{1,2,3}" for example user10, user15, user19,
> user100, user110, user20, user200, user30, user300 are also denied to
> login other than 9AM to 17Pm.
> 
> What is wrong here and how to solve this.
don't know, haven't seen that before...
> 
> 
> Why /etc/nologin also prevents the root user to login. I think this has
> to deny only non-root user. please help me to sort it out.


is this RHEL4 GA? (original release) ?
I remember an issue with pam_nologin in that release.

fixed in Update 1, IIRC
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154030

regards

Stuart

- --
Stuart Sears RHCA RHCSS RHCX PEBKAC STFU
"Quit worrying about your health. It'll go away."
- - Robert Orben
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFPJ4eamPtx1brPQ4RArITAJwMO++ZzwGHMr6kp2exmZlSayGN9ACfVGPy
glXzW6kkyEtvPVYtshG61eg=
=fQBd
-----END PGP SIGNATURE-----