Tag Info

Hot answers tagged

4

PAM modules have over 30 different return values that are mapped to either pass or fail of the whole PAM stack as stated by the configuration. It is noteworthy that a PAM module may behave different depending on the context (auth, account, password, session) that it is called in. The pairs of value=action in square brackets describe which action to take ...


3

This appears to be a feature of PAM: https://bugzilla.redhat.com/show_bug.cgi?id=485955 While not definitive, source would be the place to go for that, it is strongly suggestive that PAM is enforcing a ceiling of some kind on certain resources. The break came when I was using strace on the su command to see what it was trying to do that was getting denied, ...


1

Looks like you have mismatch between where postfix stores the emails and where courier search the emails. Looking on your postfix configuration, it pretty clear that you let postfix store the email in default format and default places, /var/spool/mail/$user with mbox format. In courier, you use authpam as authentication module. So it's expected that ...


1

First of all, ua2b provided the critical answer which was causing my confusion: PAM modules can only return a single status value per invocation Since modules can only return one status code, it's clear that the action for any bracketed set of value/action pairs is unambiguous. I thought that a module could return several status codes at once (based on ...


1

I was with a issue like this, here what I did. The strace command will print all interactions the process are doing with external libraries, so with it we can see if our config is loaded or not. So, i do, like suggested above: root:/etc/pam.d$ strace -o ~/loglimit su - glaudiston glaudiston:~$ exit logout root:/etc/pam.d$ cat ~/loglimit | grep limits.conf ...



Only top voted, non community-wiki answers of a minimum length are eligible