xscreensaver problem with RH 7.2

[Corey Kovacs]

I have seen this as well, not with nfs, but rather openafs. So far is seems to be a
bug in pam_stack. If you put your entries in the xscreensaver pam conf file it
should work. Using RH7.1 this all works great for gdm on our systems
(xscreensaver works with tweaking its conf file as above) but 7.2 croaks.

in short, you are not alone :)

Corey

Robert Greimel wrote:

> Hi,
>
> we have recently upgraded systems that were working with NIS+ and Redhat 7.1
> to Redhat 7.2. We found one persistent problem and I wonder if anybody else
> has seen this as well or could give me a hint of how to solve it:
>
> When a user logs on to the system everything works fine. Username and password
> are being picked up through NIS+. The problem comes when the user decides to
> lock the screen in X using xscreensaver. When the user types the password to
> unlock the screen xscreensaver always gives "access denied" and logs (with audit
> option in pam configuration) the following message:
>
> Dec  7 16:25:30 xxxxx xscreensaver(pam_unix)[2444]: authentication failure; logname= uid=nnnn euid=nnnn tty=:0.0 ruser= rhost=  user=xxxxxx
>
> This used to work under Redhat 7.1 . The pam.d configuration files for login
> and xscreensaver both call the system-auth stack to verify the password:
>
> auth       required     /lib/security/pam_stack.so service=system-auth
>
> I have tried to downgrade xscreensaver and pam to the versions used in 7.1
> without it leading to any success under 7.2
>
> As a "workaround" I can of course disable password checking for xscreensaver
> through pam, but that obviously defies the purpose of locking the screen.
>
> Unfortunately I have run out of ideas of what could be wrong and would
> appreciate any help with this problem.
>
> As an aside, I found that I needed to upgrade nfs-utils to version 0.3.3-1
> (from Rawhide). Otherwise rpc.mountd would periodically need to be restarted
> in order to allow proper serving of NFS file systems to NIS+ netgroups.
>
> Other facts about our setup that might be worth noting:
> - we are using nis-utils-1.4.1
> - we found that we did not need to use pam_unix2.so but that the stock
>   pam_unix.so in Redhat 7.1 and 7.2 (well, possibly apart from xscreensaver)
>   work fine.
> - automount, login and NFS serving (after the above mentioned upgrade of
>   nfs-utils) work fine with NIS+ under 7.2
>
> Thanks
>
> Robert
>
> -------------------------------------------------------------------------------
> Robert Greimel                    |
> Data Flow Scientist               |    *      *   *      *   *      *
> WFC instrument specialist         |         *         *       *  )        *
>                                   |       *   *        _n_n_          * *
> Isaac Newton Group                |                   /    n\
> Astronomy Group                   |                  /\ /\   \_
> Apartado de Correos, 321          |                _/  V  \ /  \_
> 38700 Santa Cruz de La Palma      |             __/        V     \_
> Canary Islands, Spain             |           _/                   \_
>  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~/                       \~~~~~~~~~
> email: greimel at ing.iac.es
> www  : http://www.ing.iac.es/~greimel/
> tel  : +34-922-425462 (Sea Level)
> fax  : +34-922-425401 (Sea Level)
> -------------------------------------------------------------------------------

--
Corey Kovacs               "I know not with what weapons World War III
Computer Science Dept.      will be fought, but World War IV will be
DePauw University.          fought with sticks and stones."
765.658.4761                            - Albert Einstein


-------------- next part --------------
HTML attachment scrubbed and removed