8.04 PAM errors

[NoOp]

On 04/28/2008 03:38 PM, R Kimber wrote:
> On Mon, 28 Apr 2008 10:43:22 -0700
> NoOp wrote:
> 
>> FWIW: I just came across this on the machine that I just upgraded from
>> Gutsy to Hardy. I discovered it when I found that I could not VNC into
>> the machine. Each time I would get the password prompt, but then get
>> an authentication failure. Ssh and NX worked, so I was able to view
>> the logs etc., and installing libpam-smbpass worked.
> 
> I got rid of the erros quoted by installing libpam-smbpass, even though
> I have no need of smb. I've since had quite a lot of:-
> 
> sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
> sudo: pam_unix(sudo:session): session closed for user root
> 
> and some for user 'me'
> 
> They seem to occur during the night, and so relate to scheduled jobs of
> one sort or another, but seem to indicate that whatever it is is
> successful.
> 
> -Richard.

Yep, it's an odd one.

https://bugs.launchpad.net/ubuntu/+source/pam/+bug/216990
<quote>
You can work around this, by commenting out the pam_smbpass.so related
lines in /etc/pam.d/common-auth and /etc/pam.d/common-password.
</quote>

I've suggested:

<quote>
Thanks, I tested that, and that does work.

However, this will be an issue for those that upgrade from Gutsy to
Hardy (as I found out) and suddenly find that they can no longer log
into their machine via VNC. Perhaps a patch issuing new
/etc/pam.d/common-auth and /etc/pam.d/common-password with the
pam_smbpass.so related lines commented out would be a better solution?
</quote>

I've no idea why pam_smbpass.so/samba would be related to VNC or cron jobs:

http://packages.ubuntu.com/hardy/libpam-smbpass

Maybe the libpam0g module didn't get updated properly &  libpam-smbpass
fixes it during its installation. See;
https://launchpad.net/ubuntu/+source/pam/+bugs
  https://bugs.launchpad.net/ubuntu/+source/pam/+bug/216209

I can't recall, but I seem to remember something similar when I was
upgrading. Then again it was very late at night, and about a half a
bottle of wine later, so I could be wrong :-)