[Spacewalk-list] Error with PAM authentication after Upgrade to CentOS 7.4

[Millage, Joel]

Thanks for the ideas guys, I was able to get in at least!  Seems to be a SELINUX issues with Spacewalk 2.6 and CentOS 7.4. Upgrading to Spacewalk 2.7 did seem to fix most of it though PAM auth still doesn't work right so I just left it disabled for now.

Joel  

-----Original Message-----
From: Michael Mraka [mailto:michael.mraka at redhat.com] 
Sent: Monday, October 30, 2017 4:02 AM
To: spacewalk-list at redhat.com
Cc: Millage, Joel <jmillage at integrity-apps.com>
Subject: Re: [Spacewalk-list] Error with PAM authentication after Upgrade to CentOS 7.4

Robert Paschedag:
> Am 28. Oktober 2017 20:37:08 MESZ schrieb "Millage, Joel" <jmillage at integrity-apps.com>:
> >I am using Spacewalk 2.6 with PAM authentication and have been for a 
> >few months without issues. I updated from CentOS 7.3 to 7.4 this week 
> >and now my PAM authentication no longer works with any of my users.  
> >I use PAM authentication with Kerberos 1.5.
...
> >I realize now I shouldn't have made my only admin user on PAM 
> >authentication as I can't even login with spacecmd.  Is there any way 
> >I can disable PAM auth on this user so I can login without PAM?  All 
> >the tools I have found allow me to reset my password, but not disable PAM.
> >Any help would be great thanks!
> >
> >Joel
> 
> I think the rhnuser table should be a good starting point. But I don't know, if the authentication "type" is also stored there.

Unfortunately you can have only certain users using pam. It's a global option.
So disable pam, (re)set local password, fix the pam issue and reenable it.

Regards,

--
Michael Mráka
System Management Engineering, Red Hat