> Hi! > > That's pretty odd to not have logs. Maybe you could strace xrdp-sesman > process to see if it is running PAM correctly. As root: > > strace -p $(pidof xrdp-sesman)
Please take a look at strace output (in attach).
Process 22420 attached - interrupt to quit select(8, [5 6 7], [], NULL, NULL) = 1 (in [7]) select(6, [5], NULL, NULL, {0, 0}) = 0 (Timeout) select(7, [6], NULL, NULL, {0, 0}) = 0 (Timeout) select(8, [7], NULL, NULL, {0, 0}) = 1 (in [7], left {0, 0}) getsockopt(7, SOL_SOCKET, SO_ERROR, [0], [4]) = 0 accept(7, {sa_family=AF_INET, sin_port=htons(57224), sin_addr=inet_addr("127.0.0.1")}, [16]) = 8 clone(child_stack=0x7fe2c375dff0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fe2c375e9d0, tls=0x7fe2c375e700, child_tidptr=0x7fe2c375e9d0) = 23161 time([1346444797]) = 1346444797 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0 time([1346444797]) = 1346444797 sendto(4, "<30>Aug 31 20:26:37 sesman[22420"..., 84, MSG_NOSIGNAL, NULL, 0) = 84 write(3, "[20120831-20:26:37] [INFO ] scp "..., 69) = 69 select(8, [5 6 7], [], NULL, NULL) = 1 (in [6]) select(6, [5], NULL, NULL, {0, 0}) = 0 (Timeout) select(7, [6], NULL, NULL, {0, 0}) = 1 (in [6], left {0, 0}) getsockopt(6, SOL_SOCKET, SO_ERROR, [0], [4]) = 0 select(7, [6], NULL, NULL, {0, 0}) = 1 (in [6], left {0, 0}) getsockopt(6, SOL_SOCKET, SO_ERROR, [0], [4]) = 0 recvfrom(6, "sig\0", 64, 0, NULL, NULL) = 4 select(7, [6], NULL, NULL, {0, 0}) = 0 (Timeout) access("/tmp/.X11-unix/X10", F_OK) = -1 ENOENT (No such file or directory) access("/tmp/.X10-lock", F_OK) = -1 ENOENT (No such file or directory) socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 9 getsockopt(9, SOL_SOCKET, SO_REUSEADDR, [0], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 getsockopt(9, SOL_SOCKET, SO_SNDBUF, [16384], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0 bind(9, {sa_family=AF_INET, sin_port=htons(5910), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 shutdown(9, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(9) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 9 getsockopt(9, SOL_SOCKET, SO_REUSEADDR, [0], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 getsockopt(9, SOL_SOCKET, SO_SNDBUF, [16384], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0 bind(9, {sa_family=AF_INET, sin_port=htons(6010), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 shutdown(9, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(9) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 9 getsockopt(9, SOL_SOCKET, SO_REUSEADDR, [0], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 getsockopt(9, SOL_SOCKET, SO_SNDBUF, [16384], [4]) = 0 setsockopt(9, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0 bind(9, {sa_family=AF_INET, sin_port=htons(6210), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 shutdown(9, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(9) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fe2c55609d0) = 23162 time(NULL) = 1346444797 futex(0x9f6ca0, FUTEX_WAKE_PRIVATE, 1) = 1 select(8, [7], NULL, NULL, {0, 0}) = 0 (Timeout) select(8, [5 6 7], [], NULL, NULL) = ? ERESTARTNOHAND (To be restarted) --- SIGCHLD (Child exited) @ 0 (0) --- wait4(0, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG, NULL) = 23162 time([1346444802]) = 1346444802 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0 time([1346444802]) = 1346444802 sendto(4, "<30>Aug 31 20:26:42 sesman[22420"..., 83, MSG_NOSIGNAL, NULL, 0) = 83 write(3, "[20120831-20:26:42] [INFO ] sess"..., 68) = 68 rt_sigreturn(0x9f47c0) = -1 EINTR (Interrupted system call) select(6, [5], NULL, NULL, {0, 0}) = 0 (Timeout) select(7, [6], NULL, NULL, {0, 0}) = 0 (Timeout) select(8, [7], NULL, NULL, {0, 0}) = 0 (Timeout) select(8, [5 6 7], [], NULL, NULL) = 1 (in [7]) select(6, [5], NULL, NULL, {0, 0}) = 0 (Timeout) select(7, [6], NULL, NULL, {0, 0}) = 0 (Timeout) select(8, [7], NULL, NULL, {0, 0}) = 1 (in [7], left {0, 0}) getsockopt(7, SOL_SOCKET, SO_ERROR, [0], [4]) = 0 accept(7, {sa_family=AF_INET, sin_port=htons(57232), sin_addr=inet_addr("127.0.0.1")}, [16]) = 8 clone(child_stack=0x7fe2c375dff0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fe2c375e9d0, tls=0x7fe2c375e700, child_tidptr=0x7fe2c375e9d0) = 23194 time([1346444818]) = 1346444818 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0 time([1346444818]) = 1346444818 sendto(4, "<30>Aug 31 20:26:58 sesman[22420"..., 84, MSG_NOSIGNAL, NULL, 0) = 84 write(3, "[20120831-20:26:58] [INFO ] scp "..., 69) = 69 select(8, [5 6 7], [], NULL, NULL <unfinished ...> Process 22420 detached