Hi

I use xscreensaver 5.05-1, and I am using ldap users (nss-ldapd &
pam-ldap). Just recently I have noticed that when I unlock xscreensaver
I get

permissions on the password database maybe too restrictive

not sure where to look for this, xscreensaver seems to be the only app
having problems


I can
getent passwd alex
getent passwd
getent groups
id
id alex

but I have just realised I can't
getent shadow
getent shadow alex

i see nothing,

but I can
sudo getent shadow

I presume that is normal



--
"I like to tell people when the final history is written on Iraq, it will look like just a comma because there is -- my point is, there's a strong will for democracy."

- George W. Bush
09/24/2006
in an interview on CNN

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIDkwykZz88chpJ2MRAp7MAJ4iybAoRcxFV6f8t7C67B HangpBDgCg2QA0
dPd4w5pFetjgXwYIcbP89xY=
=IQ8O
-----END PGP SIGNATURE-----

On Wed, Apr 23, 2008 at 06:36:02AM +1000, Alex Samad wrote:
> Hi
>
> I use xscreensaver 5.05-1, and I am using ldap users (nss-ldapd &
> pam-ldap). Just recently I have noticed that when I unlock xscreensaver
> I get
>
> permissions on the password database maybe too restrictive
>
> not sure where to look for this, xscreensaver seems to be the only app
> having problems
>
>
> I can
> getent passwd alex
> getent passwd
> getent groups
> id
> id alex
>
> but I have just realised I can't
> getent shadow
> getent shadow alex
>
> i see nothing,
>
> but I can
> sudo getent shadow
>
> I presume that is normal
>
>

I turned on xscreensaver verbose flag and found this

pam_conversation (...) ==> PAM_SUCCESS
xscreensaver: 06:43:16: pam_conversation (TEXT_INFO="Permissions on
the password database may be too restrictive.") .


this is in my common-auth

auth [success=1 default=ignore] pam_unix2.so
auth required pam_ldap.so use_first_pass
auth required pam_permit.so

I have added some debugging

with
auth [success=1 default=ignore] pam_unix2.so debug


and I have this in my logs now
Apr 23 06:54:58 hufpuf xscreensaver: pam_unix2(xscreensaver:auth):
pam_sm_authenticate() called
Apr 23 06:54:58 hufpuf xscreensaver: pam_unix2(xscreensaver:auth):
username=[alex]
Apr 23 06:54:59 hufpuf xscreensaver: pam_unix2(xscreensaver:auth): wrong
password, return PAM_AUTH_ERR
Apr 23 06:55:00 hufpuf xscreensaver: pam_unix2(xscreensaver:setcred):
pam_sm_setcred() called
Apr 23 06:55:00 hufpuf xscreensaver: pam_unix2(xscreensaver:setcred):
username=[alex]
Apr 23 06:55:00 hufpuf xscreensaver: pam_unix2(xscreensaver:setcred):
pam_sm_setcred: PAM_SUCCESS

Not sure who to report a bug against

Alex


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIDlMHkZz88chpJ2MRAoYWAJ9VQ9RJViX94tfnv+DRNO LI9PQxeQCffzIv
l5AvgEchGaCP1YYh4Vo6BRY=
=duaq
-----END PGP SIGNATURE-----