[Bug 314623] Re: likewise-open: allows lockout while disconnected

[Alex Mauer]

turning on debug in pam_lwidentity.conf, my /var/log/auth.log tells me
the following:

May  5 12:25:55 host su[8722]: pam_lwidentity(su:auth): PAM config: global:krb5_ccache_type 'FILE'
May  5 12:25:55 host su[8722]: pam_lwidentity(su:auth): failed to get GP info
May  5 12:25:55 host su[8722]: pam_lwidentity(su:auth): [pamh: 0x80dc138] ENTER: pam_sm_authenticate (flags: 0x0000)
May  5 12:25:55 host su[8722]: pam_lwidentity(su:auth): getting password (0x00000000)
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): Verify user 'DOMAIN\user'
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): enabling krb5 login flags
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): enabling cached login flag
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): enabling request for a FILE krb5 ccache type
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): request failed: Logon failure, WBL error was Logon failed due to bad username or password (6), NT error was NT_STATUS_LOGON_FAILURE, PAM error 7
May  5 12:25:56 host su[8722]: pam_lwidentity(su:auth): [pamh: 0x80dc138] LEAVE: pam_sm_authenticate returning 7

May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): PAM config: global:krb5_ccache_type 'FILE'
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): failed to get GP info
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): [pamh: 0x8471138] ENTER: pam_sm_authenticate (flags: 0x0000)
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): getting password (0x00000000)
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): Verify user 'DOMAIN\user'
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): enabling krb5 login flags
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): enabling cached login flag
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): enabling request for a FILE krb5 ccache type
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): request failed: Logon failure, WBL error was Logon failed due to bad username or password (6), NT error was NT_STATUS_LOGON_FAILURE, PAM error 7
May  5 12:25:59 host su[8726]: pam_lwidentity(su:auth): [pamh: 0x8471138] LEAVE: pam_sm_authenticate returning 7

May  5 12:26:02 host su[8727]: pam_lwidentity(su:auth): PAM config: global:krb5_ccache_type 'FILE'
May  5 12:26:02 host su[8727]: pam_lwidentity(su:auth): failed to get GP info
May  5 12:26:02 host su[8727]: pam_lwidentity(su:auth): [pamh: 0x84ac138] ENTER: pam_sm_authenticate (flags: 0x0000)
May  5 12:26:02 host su[8727]: pam_lwidentity(su:auth): getting password (0x00000000)
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): Verify user 'DOMAIN\user'
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): enabling krb5 login flags
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): enabling cached login flag
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): enabling request for a FILE krb5 ccache type
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): request failed: Logon failure, WBL error was Logon failed due to bad username or password (6), NT error was NT_STATUS_LOGON_FAILURE, PAM error 7
May  5 12:26:03 host su[8727]: pam_lwidentity(su:auth): [pamh: 0x84ac138] LEAVE: pam_sm_authenticate returning 7

May  5 12:26:06 host su[8731]: pam_lwidentity(su:auth): PAM config: global:krb5_ccache_type 'FILE'
May  5 12:26:06 host su[8731]: pam_lwidentity(su:auth): failed to get GP info
May  5 12:26:06 host su[8731]: pam_lwidentity(su:auth): [pamh: 0x9338138] ENTER: pam_sm_authenticate (flags: 0x0000)
May  5 12:26:06 host su[8731]: pam_lwidentity(su:auth): getting password (0x00000000)
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): Verify user 'DOMAIN\user'
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): enabling krb5 login flags
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): enabling cached login flag
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): enabling request for a FILE krb5 ccache type
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): request failed: Account locked out, WBL error was The account has been automatically locked out due to too many invalid attempts to logon or change the password (10), NT error was NT_STATUS_ACCOUNT_LOCKED_OUT, PAM error 11
May  5 12:26:11 host su[8731]: pam_lwidentity(su:auth): [pamh: 0x9338138] LEAVE: pam_sm_authenticate returning 6

-- 
likewise-open: allows lockout while disconnected
https://bugs.launchpad.net/bugs/314623
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to likewise-open in ubuntu.