My version of Linux is Fedora 12 x86_64.  Here is my /etc/pam.d/su:

#%PAM-1.0
auth            sufficient      pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient      pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth           required        pam_wheel.so use_uid
auth            include         system-auth
account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         optional        pam_xauth.so

Since pam_afs_session.so is not listed, I'd guess you are right, and that is 
not the source of the delay.

If any other thoughts come to mind, let me know.

Thanks,
eric

--- On Wed, 3/17/10, Russ Allbery <[email protected]> wrote:

> From: Russ Allbery <[email protected]>
> Subject: Re: [OpenAFS] significant delay for afs user to login as root via su
> To: [email protected]
> Cc: "Simon Wilkinson" <[email protected]>, [email protected]
> Date: Wednesday, March 17, 2010, 4:48 PM
> [email protected]
> writes:
> 
> > Well, there's nothing in /var/log/messages
> either.  As for checking the
> > PAM configuration for su, can you elaborate?  I'm
> a beginner at this, so
> > you may have to provide details.
> 
> I don't know what version of Linux you're using, but as a
> general rule of
> thumb, look in /etc/pam.d/su and make sure that it's
> including your shared
> PAM configuration that you're thinking you're using and you
> don't have
> some other reference to pam_afs_session in there that
> doesn't have the
> debug line.
> 
> Failing that, well, all the evidence so far indicates that
> pam_afs_session
> isn't being run at all for su, and hence can't be the
> source of your
> problems.
> 
> -- 
> Russ Allbery ([email protected]) 
>            <http://www.eyrie.org/~eagle/>
> 



_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to