On Wed, Feb 27, 2019 at 3:36 PM nicolas patrois wrote: > > I have this for example: > Feb 2 17:57:22 nicolas unix_chkpwd[10736]: check pass; user unknown > Feb 2 17:57:31 nicolas unix_chkpwd[10743]: check pass; user unknown > Feb 2 17:57:31 nicolas unix_chkpwd[10743]: password check failed for user > (nicolas) > Feb 2 17:57:31 nicolas xscreensaver: pam_unix(xscreensaver:auth): > authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser= rhost= > user=nicolas > Feb 2 17:57:31 nicolas xscreensaver: pam_winbind(xscreensaver:auth): getting > password (0x00000388) > Feb 2 17:57:31 nicolas xscreensaver: pam_winbind(xscreensaver:auth): > pam_get_item returned a password > Feb 2 17:57:31 nicolas xscreensaver: pam_winbind(xscreensaver:auth): > internal module error (retval = PAM_AUTHINFO_UNAVAIL(9), user = 'nicolas') > Feb 2 17:57:32 nicolas xscreensaver[3516]: FAILED LOGIN 1 ON DISPLAY ":0.0", > FOR "nicolas" > Feb 2 17:57:34 nicolas unix_chkpwd[10744]: check pass; user unknown > Feb 2 17:57:47 nicolas xscreensaver[3516]: pam_unix(xscreensaver:auth): > conversation failed > Feb 2 17:57:47 nicolas xscreensaver[3516]: pam_unix(xscreensaver:auth): auth > could not identify password for [nicolas] > Feb 2 17:57:47 nicolas xscreensaver[3516]: pam_winbind(xscreensaver:auth): > getting password (0x00000388) > Feb 2 17:57:47 nicolas xscreensaver[3516]: pam_winbind(xscreensaver:auth): > Could not retrieve user's password > Feb 2 17:57:48 nicolas unix_chkpwd[10756]: check pass; user unknown >
It is strange that the errors are different in the two cases - I suppose this is two attempts at :31 and :47?. Is your /etc/shadow readable by the shadow group and your /sbin/unix_chkpwd setgid shadow? Tormod
