Bug 1213149 - pam_unix(gdm-password:auth): auth could not identify password for new pam module
Summary: pam_unix(gdm-password:auth): auth could not identify password for new pam module
Status: RESOLVED INVALID
Alias: None
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Basesystem (show other bugs)
Version: Current
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: E-mail List
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-07-07 19:25 UTC by David Mulder
Modified: 2023-07-07 19:33 UTC (History)
0 users

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description David Mulder 2023-07-07 19:25:29 UTC 
I'm working on a new pam module (and nss) for a project on the samba team (github.com/openSUSE/himmelblau). I'm encountering an error I don't understand when trying to authenticate via either gdm or console.

Jul 07 13:08:25 localhost.localdomain gdm-password][5159]: gkr-pam: unable to locate daemon control file
Jul 07 13:08:25 localhost.localdomain gdm-password][5159]: gkr-pam: stashed password to try later in open session
Jul 07 13:08:26 localhost.localdomain unix_chkpwd[5165]: could not obtain user info (tux@dmuldersuse.onmicrosoft.com)

I wrote a simple python script to call pam, and I verified that pam authentication is successful. Also, I can call getent and fetch user and group info without problem. Why is unix_chkpwd rejecting the authentication that pam approved?
Comment 1 David Mulder 2023-07-07 19:33:35 UTC 
Just realized this was due to pam account wasn't configured (and pam_unix account was required).