| View previous topic :: View next topic |
| Author |
Message |
ppurka
Advocate
Joined: 26 Dec 2004
Posts: 3256
|
 Posted: Tue Jul 28, 2009 1:42 am Post subject: Make pam allow non-root users to authenticate a user/passwd |
 |
|
Hi,
I wonder if the subject line makes much sense  Let me explain what I want to do.
I want to modify the pam config files in /etc/pam.d to achieve a particular objective. The objective is to allow myself to log back in after I use enlightenment's (e17's) screen lock.
Currently what happens is that even after providing the correct password, the e17 desklock fails to authenticate the user via pam (and hence fails to unlock the screen). The reason why e17 fails is explained in this post. What I have understood from that post is that e17 runs the desklock process as a user (my login name) and hence is unable to authenticate my login/password credentials via pam since pam expects the root user to ask for the authentication.
I have looked through the pam config files in /etc/pam.d and I fail to see any command/config which essentially blocks users from trying to authenticate or verify a user/password combination.
Can someone help me with modifying my pam config files? My system-auth file is the default which came with pam: | Code: | auth required pam_env.so
auth required pam_unix.so try_first_pass likeauth nullok
account required pam_unix.so
password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password required pam_unix.so try_first_pass use_authtok nullok sha512 shadow
session required pam_limits.so
session required pam_env.so
session required pam_unix.so
session optional pam_permit.so |
TIA 
_________________
emerge --quiet redefined | E17 vids: I, II | Now using kde5 | e is unstable :-/ |
|
| Back to top |
|
 |
Mike Hunt
Watchman
Joined: 19 Jul 2009
Posts: 5287
|
| Posted: Tue Jul 28, 2009 2:43 am Post subject: |
|
|
Don't know if this makes any sense, and I can't test because I don't have e17 | Code: | cd /etc/pam.d
ln -s xscreensaver desklock |
Maybe worth a try.  |
|
| Back to top |
|
|
ppurka
Advocate
Joined: 26 Dec 2004
Posts: 3256
|
| Posted: Tue Jul 28, 2009 4:31 am Post subject: |
|
|
| Mike Hunt wrote: | Don't know if this makes any sense, and I can't test because I don't have e17 | Code: | cd /etc/pam.d
ln -s xscreensaver desklock |
Maybe worth a try. |
Thanks, but there is no pam specific file for e17 and I don't have xscreensaver installed 
Currently, I am using a workaround. I configured e17 to call xtrlock instead of its own desklock function. I just want the native e17 desklock to work
_________________
emerge --quiet redefined | E17 vids: I, II | Now using kde5 | e is unstable :-/ |
|
| Back to top |
|
|
|
Networking & Security
