Login from X-terminal 1

[Scrollon]

I have a Solaris 8 system acting as a NIS slave. My /etc/nsswitch.conf file specifies

passwd: files nis

and in general users can login successfully. However, I have a few users who use X-terminals booted off the Solaris box and these people are unable to login unless they have entries in the /etc/passwd and /etc/shadow files.

It looks like for these guys the login process is not using NIS.

Any insight into this problem would be most welcome.
Thanks

 

[jaytco]

You may also want to take a look at your /etc/pam.conf and see if there are different actions for telnet, dtlogin, login, and other. You can put pam into debug by create an /etc/pam_debug file. That may provide more information.

 

[Annihilannic]

That's a very useful tip regarding /etc/pam_debug; does that work on other OS too or is it Solaris-specific?

Annihilannic.

 

[jaytco]

I know that there are debug modules, but not sure if the /etc/pam_debug will do it. Also, within your pam you can add debug to the end of the lines (if the module supports it) and that will provide more debug information as well. It looks like with linux you can request specific debug information.

Based on your config, you may need to modify your /etc/syslog.conf to capture the information where you want it.

 

[Annihilannic]

Yep, I'm aware that many of the modules support the 'debug' option, however it can be a bit of a pain going through the PAM config adding that option to all of the modules when you're not sure where in the stack there is a problem... and especially so when it uses pam_stack.so which means multiple config files, etc. So just creating /etc/pam_debug sounds very handy by comparison.

Annihilannic.