pam_unix should not always complain about failed authentication

Bug #859102 reported by Kjell Braden
28
This bug affects 5 people
Affects Status Importance Assigned to Milestone
pam (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

I run a server with ubuntu lucid, pam et al 1.1.1-2ubuntu5.3.
I used pam-auth-update to enable unix-style and ldap style authentication.
For accounts that exist in my LDAP only, i get on every (successful!) authentication attempt the following message in auth.log:

dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=xyz rhost=127.0.0.1 user=xyz

This appears to happen because of any of the following problems:
1. the unix module has a higher priority than the ldap module
2. the unix module itself logs errors even if its "control" settings (ie. the second field in common-auth) ask it to ignore such a problem
3. the unix module is not supposed to be configured at the same time as the ldap module.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in pam (Ubuntu):
status: New → Confirmed
Revision history for this message
jlacy86 (jlacy86) wrote :

I am also experiencing this problem on oneiric, Ubuntu 11.

Revision history for this message
John Python (python-noob) wrote :

This problem also exists for sssd:

Sep 25 13:11:10 myserver sshd[15919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.0.0.1 user=bob
Sep 25 13:11:10 myserver sshd[15919]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.0.0.1 user=bob

It's possible to fix this ourselves, but it would be much better to see a more permanent solution.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.