On Wed, 2 Mar 2005, David L. Crow wrote:
This message is coming from PAM, but I don't know how to determine which authentication service is mis-configured or broken.
Further investigation shows that most, if not all, PAM modules allow a "debug" argument. When I added this to all of the module lines in /etc/pam.d/atd, I see the following syslog messages (/var/log/secure):
Mar 3 22:51:00 waterloo pam_stack[31567]: called for "PAM_ACCOUNT" Mar 3 22:51:00 waterloo pam_stack[31567]: called from "atd" Mar 3 22:51:00 waterloo pam_stack[31567]: initializing Mar 3 22:51:00 waterloo pam_stack[31567]: creating child stack `system-auth' Mar 3 22:51:00 waterloo pam_stack[31567]: creating environment Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_AUTHTOK to child: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_CONV to child Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_FAIL_DELAY to child: source not set Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_OLDAUTHTOK to child: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_RHOST to child: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_RUSER to child: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_SERVICE to child Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_TTY to child Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_USER to child Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_USER_PROMPT to child: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing data to child Mar 3 22:51:00 waterloo pam_stack[31567]: calling substack Mar 3 22:51:00 waterloo pam_stack[31567]: substack returned 9 (Authentication service cannot retrieve authentication info.) Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_AUTHTOK to parent: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_CONV to parent Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_FAIL_DELAY to parent: source not set Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_RHOST to parent: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_RUSER to parent: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_SERVICE to parent Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_TTY to parent Mar 3 22:51:00 waterloo pam_stack[31567]: passing PAM_USER to parent Mar 3 22:51:00 waterloo pam_stack[31567]: NOT passing PAM_USER_PROMPT to parent: source is NULL Mar 3 22:51:00 waterloo pam_stack[31567]: passing data back Mar 3 22:51:00 waterloo pam_stack[31567]: passing former back Mar 3 22:51:00 waterloo pam_stack[31567]: returning 9 (Authentication service cannot retrieve authentication info.) Mar 3 22:51:00 waterloo atd[31567]: Authentication service cannot retrieve authentication info. Mar 3 22:51:00 waterloo pam_stack[31567]: freeing stack data for `system-auth' service
Any ideas what this is telling me?