pam debugging

[Cedric Gava <gava.c@free.fr>]

Hello

I’am trying to set up pam/ldap authentication on Wheezy, and struggling for many days on these topics since I knew nothing from both of them before beginning (I know more know ;)

To better understand what’s going on (I have ldap credential issue), I tried to activate debug in pam, like, for example :

/etc/pam.d/common-auth	
auth    [success=2 default=ignore]      pam_unix.so nullok_secure debug
auth    [success=1 default=ignore]      pam_ldap.so use_first_pass debug

/etc/rsyslog.conf
*.=debug -/var/log/debug
tested with : 
$ logger -p auth.debug test 
OK rsyslog.conf seems ok

I TESTED THEN the pam debug messages 
I tried both : 
$ pamtester login cedric authenticate
and login out, login in from sshd or tty, NOTHING is visible in /var/log/debug 

I thought it was because —enable-debug was not activated  when source where compiled, so I recompiled packages with this option set with ./configure (or dpkg-buildpackage and debian/rules if you prefer). After package installation, I saw dozen of debug messages… Even without setting « debug » in pam.d conf… so it is not a master switch for enabling local debug  of pam modules.


Any idea why I don’t see any debug message in /var.log/debug if I activate pam debug in /etc/pam.d/common-auth	 ?

Thank you
Cedric