Re: PAM auth

From: "Albe Laurenz" <all(at)adv(dot)magwien(dot)gv(dot)at>
To: "satoshi nagayasu *EXTERN*" <nagayasus(at)nttdata(dot)co(dot)jp>, "PostgreSQL-development" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: PAM auth
Date: 2006-06-20 08:01:27
Message-ID: 52EF20B2E3209443BC37736D00C3C13809059F52@EXADV1.host.magwien.gv.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers


satoshi nagayasu wrote:
> I'm trying to use PAM auth on PostgreSQL, but I still cannot
> get success on PAM auth (with PG813 and RHEL3).
>
> pg_hba.conf has
> > host pamtest all 0.0.0.0/0 pam
>
> /etc/pam.d/postgresql is
> > #%PAM-1.0
> > auth required pam_stack.so service=system-auth
> > account required pam_stack.so service=system-auth
> > password required pam_stack.so service=system-auth
>
> And I've changed user password with "ALTER USER ... PASSWORD".
>
> However, my postmaster always denies my login.

/etc/pam.d/system-auth probably uses pam_unix.so to authenticate.

Does the user exist on the machine and have the password you try?

You could add 'debug' to the pam_unix.so lines in /etc/pam.d/system-auth
and capture what PAM logs to syslog, maybe that will help.

Yours,
Laurenz Albe

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Gurjeet Singh 2006-06-20 08:02:26 Re: shall we have a TRACE_MEMORY mode
Previous Message Tom Lane 2006-06-20 04:18:32 Re: shall we have a TRACE_MEMORY mode