ALT Linux sysadmins discussion
 help / color / mirror / Atom feed
From: Afanasov Dmitry <ender@altlinux.org>
To: sysadmins@lists.altlinux.org
Subject: Re: [Sysadmins] vsftpd + pam-mysql auth problem
Date: Wed, 26 Jan 2011 15:31:41 +0300
Message-ID: <20110126123139.GA12957@ender.fondinvestrk.ru> (raw)
In-Reply-To: <4D3EF6FE.3060604@front.ru>

[-- Attachment #1: Type: text/plain, Size: 1179 bytes --]

On Tue, Jan 25, 2011 at 07:14:54PM +0300, Александр wrote:
> 22.01.2011 13:38, Александр пишет:
> > Jan 22 11:49:33 nanoRED vsftpd: pam_mysql - pam_mysql_check_passwd() returning 6.
[...]
> > Jan 22 11:49:33 nanoRED vsftpd: pam_mysql - pam_sm_authenticate() returning 3.
в моем случае только что было:
Jan 26 14:54:53 ender vsftpd: pam_mysql - pam_mysql_check_passwd() returning 6. 
Jan 26 14:54:53 ender vsftpd: pam_mysql - pam_mysql_converse() called. 
Jan 26 14:54:53 ender vsftpd: pam_mysql - conversation failure (reason: Conversation error) 
Jan 26 14:54:53 ender vsftpd: pam_mysql - pam_sm_authenticate() returning 3.

причина оказалась тривиальнейшей: vsftpd собран с pam_userpass.so, потому
требует следующей строки в vsftpd.pam _перед_ pam_mysql.so:

 auth        required    pam_userpass.so
 auth        required    pam_mysql.so ...
 account     required    pam_mysql.so ...
 password    required    pam_deny.so
 session     required    pam_deny.so

правда такой session, к слову, требует session_support=NO. дальше мне было
лень модули подбирать.

P.S. а pam-mysql в сизифе уже с ноября нету оказывается.

-- 
С уважением
Афанасов Дмитрий

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

  parent reply	other threads:[~2011-01-26 12:31 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-01-15 14:26 Александр
2011-01-21 18:39 ` Александр
2011-01-22 10:38   ` Александр
2011-01-25 16:14     ` Александр
2011-01-25 19:51       ` Afanasov Dmitry
2011-01-26 12:31       ` Afanasov Dmitry [this message]
2011-01-28 16:23         ` Александр
2011-01-28 19:04           ` Afanasov Dmitry
2011-01-28 23:36             ` Alexey Borisenkov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20110126123139.GA12957@ender.fondinvestrk.ru \
    --to=ender@altlinux.org \
    --cc=sysadmins@lists.altlinux.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux sysadmins discussion

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
		sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
	public-inbox-index sysadmins

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.sysadmins


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git