Unexpected login/nsswitch.conf behavior.
by Bisbal, Prentice
I'm using Kerberos 5 for authentication and LDAP to provide account/host
information.Kerberos and LDAP are served from the same system. The server
and my client(s) are both FC1. My nsswitch.conf file has "files" listed
first, followed by "ldap" for all services provided by LDAP:
passwd: files ldap
shadow: files ldap
group: files ldap
hosts: files ldap dns
I would expect this to allow me to login as root on a system that has lost
connectivity with the LDAP/Kerberos server, since root's account information
is in local files. However, if my workstations loose communication with the
LDAP/Kerberos server, I can't login at all, not even as root. After I type
in the root username, The system appears to hang, but I eventually will get
a "Login timeout" error. I've tested this my unplugging my ethernet cable
and trying to login as root.
My /etc/pam.d/system-auth file looks at pam_unix.so before pam_krb5.so, and
was generated using authconfig. I just added the debug arguments to help
track down this problem:
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/$ISA/pam_env.so debug
auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok
debug
auth sufficient /lib/security/$ISA/pam_krb5.so use_first_pass
debug
auth required /lib/security/$ISA/pam_deny.so debug
account required /lib/security/$ISA/pam_unix.so debug
account [default=bad success=ok user_unknown=ignore service_err=ignore
syste
m_err=ignore] /lib/security/$ISA/pam_krb5.so debug
password required /lib/security/$ISA/pam_cracklib.so retry=3 type=
debug
password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok
md5
shadow debug
password sufficient /lib/security/$ISA/pam_krb5.so use_authtok debug
password required /lib/security/$ISA/pam_deny.so debug
session required /lib/security/$ISA/pam_limits.so debug
session required /lib/security/$ISA/pam_unix.so debug
session optional /lib/security/$ISA/pam_krb5.so debug
Any ideas?
Prentice
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
19 years, 5 months
FC3 and ispell
by MOPO3
Hi All,
I have problems installing ispell-3.2.06
When I run make, the following erros appears in the console window :
+ cc -O -c term.c
term.c: In function `terminit':
term.c:310: error: `TIOCGETP' undeclared (first use in this function)
term.c:310: error: (Each undeclared identifier is reported only once
term.c:310: error: for each function it appears in.)
term.c:316: error: `sbuf' has an incomplete type
term.c:317: error: invalid use of undefined type `struct sgttyb'
term.c:317: error: `ECHO' undeclared (first use in this function)
term.c:318: error: invalid use of undefined type `struct sgttyb'
term.c:318: error: `CBREAK' undeclared (first use in this function)
term.c:319: error: `TIOCSETP' undeclared (first use in this function)
term.c:321: error: invalid use of undefined type `struct sgttyb'
term.c:322: error: invalid use of undefined type `struct sgttyb'
term.c: In function `done':
term.c:365: error: `TIOCSETP' undeclared (first use in this function)
term.c: In function `onstop':
term.c:381: error: `TIOCSETP' undeclared (first use in this function)
term.c: In function `shellescape':
term.c:456: error: `TIOCSETP' undeclared (first use in this function)
term.c: At top level:
term.c:158: error: storage size of `sbuf' isn't known
term.c:159: error: storage size of `osbuf' isn't known
make: *** [term.o] Error 1
Tell me please how I can fix this ?
19 years, 5 months
Atitvout Fedora Core 3 problems
by chrmica
Hi,
I upgraded from FC 1 to FC 3 on my dell Insprion 5100 which has an ATI
Mobility 7500 32 mb, I used atitvout to enable tv-out with the following
command atitvout -f t but this has stopped working since I upgraded to FC 3
any suggestions on how to fix this I also tested with the vesa driver on FC3
and tv-out works but would like to get it to work with the radeon driver.
Thx
19 years, 5 months
Re: FC3 -- KDE CDROM, xmodmap and pilot-xfer
by Adam
I also have the mounting cdrom problem in kde off a fresh install. It also mounts in gnome. I believe I chose to install everything. Any help anyone could provide would be great. [obviously gnome is far superior?]
(the issue this original question was in was vol 9, issue 519)
---------------------------------
Post your free ad now! Yahoo! Canada Personals
19 years, 5 months
Re: Fedora Core 2 Update: ppp-2.4.2-3.FC2.1
by Matthew Miller
On Wed, Dec 01, 2004 at 03:21:03PM +0100, Thomas Woerner wrote:
> Name : ppp
> Version : 2.4.2
> Release : 3.FC2.1
^^^^^^^
Is this the right version number? 2.4.2-5.2.FC2, which appears higher, has
been in the update area for a month or so.
Hmm. In fact from the changelog of that package, 3.FC2.1 is from July 8, and
there's several fixes since then....
--
Matthew Miller mattdm(a)mattdm.org <http://www.mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>
19 years, 5 months
FC3 x86_64 iSCSI
by Aaron M. Hirsch
I haven't played with the installation yet, but does anyone have iSCSI running on the x86_64 artichecture with FC3? Any suggestions/recommendations?
TIA!
19 years, 5 months
Configure initial wallpapers
by Patrick
Does anybody know how to configure the initial wallpapers of Fedora 3?
Is there a way I can determine which wallpapers will or will not be visible to the users?
In other words, where is the "original" wallpaper-list stored??
_______________________________________________
No banners. No pop-ups. No kidding.
Make My Way your home on the Web - http://www.myway.com
19 years, 5 months
RE: FC3 stable enough for production web server?
by Jeff McKeon
> -----Original Message-----
> From: fedora-list-bounces(a)redhat.com
> [mailto:fedora-list-bounces@redhat.com] On Behalf Of Rahul Sundaram
> Sent: Wednesday, December 01, 2004 12:11 PM
> To: For users of Fedora Core releases
> Subject: Re: FC3 stable enough for production web server?
>
>
> Hi
>
> > Also, I currently have one server with RHES2.1 and the PHP release
> > level I need is not officially supported for it and there
> are no RPM's
> > for it. Upgrading this server would mean upgrading a lot of
> > dependencies.
>
> have you considered using centos (centos.org)
>
>
Interesting, didn't know that existed. Has anyone used this distro?
19 years, 5 months
mailman migration fc1-> fc3
by David Jansen
I'm building a new mailserver using FC3 to replace the current server
which is running FC1. Almost everything is ready, but I ran into some
issues regarding mailman. The package has been completely rearranged in
FC3, and this is an improvement, having binaries in /usr, configuration
in /etc and server data in /var/lib
Only now I wonder if I have done all that is needed to migrate the
existing lists. So far I have done:
. copied /var/mailman/archives to /var/lib/mailman/archives & modified
the symbolic links
. copied /var/mailman/data to /etc/mailman + various edits
. copied /var/mailman/lists to /var/lib/mailman/lists
. modified httpd.conf to point to the new locations
Was this the proper way or have I missed something much more obvious
like a migration script? Did I forget something? (don't think so, since
the lists and the archives seem to be working)
David Jansen
19 years, 5 months
