RE: pam errors caused by netatalk
Hello,
pfaffben@pilot.msu.edu:
>Whenever someone tries to contact my system through Appletalk
>(netatalk), I get the following errors from pam in the system log (and
>the access fails):
>
>Nov 6 20:26:15 pfaffben pam[3456]: unable to
dlopen(/usr/lib/security/required)
>Nov 6 20:26:15 pfaffben pam[3456]: [dlerror: File not found]
>Nov 6 20:26:15 pfaffben pam[3456]: adding faulty module:
/usr/lib/security/required
>Nov 6 20:26:15 pfaffben pam[3456]: (other) illegal module type: OTHER
I do not think it come from netatalk.
What I did was to change the contents of the "other" file.
dali# cat /etc/pam.d/other.org
other auth required pam_deny.so
OTHER account required pam_deny.so
OTHER password required pam_deny.so
OTHER session required pam_deny.so
dali# cat /etc/pam.d/other
auth required pam_deny.so
account required pam_deny.so
password required pam_deny.so
session required pam_deny.so
-------------------------------
I also have a problem with netatalk. If a user mounting his home-directory on
a Mac gives an incorrect password there is no more reply from the server
to any Mac.
I have to reboot the server to get it going again.
dali# tail /var/log/syslog
Nov 7 11:09:17 dali afpd[159]: dali:AFPServer@* started on 102.154:128
(1.4b2)
Nov 7 11:13:31 dali afpd[195]: session from 106.123:244 on 102.154:129
Nov 7 11:13:31 dali afpd[159]: atp_sreq to (5) 27136.123:245
Nov 7 11:13:41 dali afpd[159]: atp_rresp: Connection timed out
Nov 7 11:13:41 dali afpd[159]: asp_chld 195 killed
Nov 7 11:13:44 dali afpd[196]: session from 106.123:244 on 102.154:129
Nov 7 11:13:44 dali afpd[159]: atp_sreq to (5) 27136.123:245
Nov 7 11:16:37 dali afpd[159]: kill: No such process
Nov 7 11:16:37 dali afpd[159]: asp_alrm: 196 timed out
If I comment out the "pam_unix_auth.so" and just "pam_permit.so" it works
dali# cat /etc/pam.d/netatalk
#auth required pam_unix_auth.so
auth required pam_permit.so
account required pam_unix_acct.so
session required pam_unix_session.so
password required pam_unix_passwd.so
------------
regards
ragnar@this.is
this.is/ragnar
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org .
Trouble? e-mail to templin@bucknell.edu .
Reply to: