Bug 1213149

Summary: pam_unix(gdm-password:auth): auth could not identify password for new pam module
Product: [openSUSE] openSUSE Tumbleweed Reporter: David Mulder <david.mulder>
Component: BasesystemAssignee: E-mail List <screening-team-bugs>
Status: RESOLVED INVALID QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None    
Version: Current   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description David Mulder 2023-07-07 19:25:29 UTC
I'm working on a new pam module (and nss) for a project on the samba team (github.com/openSUSE/himmelblau). I'm encountering an error I don't understand when trying to authenticate via either gdm or console.

Jul 07 13:08:25 localhost.localdomain gdm-password][5159]: gkr-pam: unable to locate daemon control file
Jul 07 13:08:25 localhost.localdomain gdm-password][5159]: gkr-pam: stashed password to try later in open session
Jul 07 13:08:26 localhost.localdomain unix_chkpwd[5165]: could not obtain user info (tux@dmuldersuse.onmicrosoft.com)

I wrote a simple python script to call pam, and I verified that pam authentication is successful. Also, I can call getent and fetch user and group info without problem. Why is unix_chkpwd rejecting the authentication that pam approved?
Comment 1 David Mulder 2023-07-07 19:33:35 UTC
Just realized this was due to pam account wasn't configured (and pam_unix account was required).