Re: PAM auth

Поиск
Список
Период
Сортировка
От Satoshi Nagayasu
Тема Re: PAM auth
Дата
Msg-id 4497B513.10905@nttdata.co.jp
обсуждение исходный текст
Ответ на Re: PAM auth  ("Albe Laurenz" <all@adv.magwien.gv.at>)
Ответы Re: PAM auth
Список pgsql-hackers
Albe,

Albe Laurenz wrote:
> /etc/pam.d/system-auth probably uses pam_unix.so to authenticate.
> 
> Does the user exist on the machine and have the password you try?

Yes, I have same user name on my linux box and postgresql,
and they have same password (now).

> You could add 'debug' to the pam_unix.so lines in /etc/pam.d/system-auth
> and capture what PAM logs to syslog, maybe that will help.

Finally, by my small program, I found the PAM module is attempting
to read /etc/shadow to authenticate, but /etc/shadow can't be read
by non-superuser privilege.

I know, the postmaster is running under "postgres" user privilege,
so PAM auth will always cause 'permission denied' around /etc/shadow.

How can I solve this? Any ideas?

Thanks.
-- 
NAGAYASU Satoshi <nagayasus@nttdata.co.jp>
Phone: +81-3-3523-8122


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Dave Page"
Дата:
Сообщение: Re: CVS HEAD busted on Windows?
Следующее
От: Simon Riggs
Дата:
Сообщение: Re: sync_file_range()