From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <fnm@red-team.org.ua>
From: Nick Fedchik <fnm@red-team.org.ua>
Organization: R.E.D Team
To: sisyphus@altlinux.ru
Subject: Re: [sisyphus] KDE and Lock screen
Date: Mon, 7 Jul 2003 14:37:07 +0300
User-Agent: KMail/1.5.2
References: <200307041753.56144.fnm@red-team.org.ua>
	<200307071411.57189.fnm@red-team.org.ua>
	<200307071517.02104.zerg@altlinux.org>
In-Reply-To: <200307071517.02104.zerg@altlinux.org>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="koi8-r"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
Message-Id: <200307071437.07698.fnm@red-team.org.ua>
X-BeenThere: sisyphus@altlinux.ru
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: sisyphus@altlinux.ru
List-Id: <sisyphus.altlinux.ru>
List-Unsubscribe: <http://altlinux.ru/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@altlinux.ru?subject=unsubscribe>
List-Archive: </pipermail/sisyphus>
List-Post: <mailto:sisyphus@altlinux.ru>
List-Help: <mailto:sisyphus-request@altlinux.ru?subject=help>
List-Subscribe: <http://altlinux.ru/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Mon, 07 Jul 2003 11:37:12 -0000
Archived-At: <http://lore.altlinux.org/sisyphus/200307071437.07698.fnm@red-team.org.ua/>
List-Archive: <http://lore.altlinux.org/sisyphus/>

On Monday 07 July 2003 14:17, Sergey V Turchin wrote:
> А смена пароля работает из под
> пользователей testuser и fnm ?
[fnm@fnm fnm]$ su - testuser
Password:
-bash: /home/testuser/.bash_profile: Permission denied
-bash-2.05b$ passwd
passwd: User not known to the underlying authentication module.

[fnm@fnm fnm]$ passwd
passwd: User not known to the underlying authentication module.

[root@fnm fnm]# ls -la /etc/tcb/fnm
итого 12
drwx--s---    2 fnm      auth         4096 Июн  5 15:16 .
drwx--x---   52 root     root         4096 Июл  7 12:20 ..
-rw-r-----    1 fnm      auth           77 Июн  5 15:16 shadow
-rw-------    1 fnm      auth            0 Июн  5 15:16 shadow-
-rw-------    1 fnm      auth            0 Июн  5 15:16 shadow.lock
[root@fnm fnm]# ls -la /etc/tcb/testuser
итого 12
drwx--s---    2 testuser auth         4096 Июл  7 12:21 .
drwx--x---   52 root     root         4096 Июл  7 12:20 ..
-rw-r-----    1 testuser auth           82 Июл  7 12:21 shadow
-rw-------    1 testuser auth            0 Июл  7 12:20 shadow-
-rw-------    1 testuser auth            0 Июл  7 12:20 shadow.lock

[root@fnm fnm]# cat /etc/nsswitch.conf | grep shadow
#       tcb   Use local tcb shadow files, see tcb(5)
shadow:     tcb files nisplus nis
#shadow:    db tcb files nisplus nis

[root@fnm fnm]# ls -la /etc/tcb
drwx--x---   52 root     root         4096 Июл  7 12:20 .
drwxr-xr-x   88 root     root         8192 Июл  7  2003 ..

[root@fnm fnm]# ls -l /etc/pam.d/passwd
-rw-r-----    1 root     shadow        127 Май 23 22:51 /etc/pam.d/passwd

[root@fnm fnm]# cat /etc/pam.d/passwd
#%PAM-1.0
auth     include        system-auth
account  include        system-auth
password include        system-auth
session  required       pam_deny.so

[root@fnm fnm]# cat /etc/pam.d/kde
#%PAM-1.0
auth     include        system-auth
auth     required       pam_nologin.so
account  include        system-auth
password include        system-auth
session  include        system-auth
session  optional       pam_console.so

Куда дальше?

-- 
Best regards, Nick Fedchik 
FNM3-RIPE(-UANIC), R.E.D Team leader
http://www.red-team.org.ua