PAM hangs after authenticating against 2003 AD

2006-08-08 Thread Jesper Angelo
Hi, I was looking for a PAM group, but couldnt find one, so I hope someone here might have the knowledge. I am trying to log into my linux box, using password from a Win 2003 AD. Everything seems to be talking, but after login, everything hangs for 30 seconds and then exits out. So if anyone ha

Re: PAM hangs after authenticating against 2003 AD

2006-08-08 Thread Sensei
On 2006-08-08 15:03:46 +0200, "Jesper Angelo" <[EMAIL PROTECTED]> said: > Additional info: > > Local login works using pam_unix... > > Even if I put pam_unix to be optional (ie all passwords are accepted) > it works - except if I put in the right password from the AD. > > So its something with

Re: PAM hangs after authenticating against 2003 AD

2006-08-09 Thread Jesper Angelo
Account: newbie ( Created on both AD and local (/etc/passwd) ) Login with pam_unix yields: ==> /var/log/auth.log <== Aug 9 11:51:11 localhost login[15519]: pam_krb5: pam_sm_authenticate(login newbie): entry: Aug 9 11:51:11 localhos

Re: PAM hangs after authenticating against 2003 AD

2006-08-09 Thread Sensei
On 2006-08-09 12:21:56 +0200, "Jesper Angelo" <[EMAIL PROTECTED]> said: > Account: newbie ( Created on both AD and local (/etc/passwd) ) Well, what I intended was to create a local user and then kinit to a principal. So on unix ``localuser'' and on AD ``aduser''. > Login with pam_unix yields: [

Re: PAM hangs after authenticating against 2003 AD

2006-08-11 Thread Markus Moeller
pam_krb5 checks if the kdc you talk to is not a fake by using the host principal in the default keytab. Look at the traffic on port 88 with ethereal and you should see a tgt request for host/server-fqdn. Some pam modules have an option to not do this verification, check your man pages. Regards

Re: PAM hangs after authenticating against 2003 AD

2006-08-11 Thread Russ Allbery
Markus Moeller <[EMAIL PROTECTED]> writes: > pam_krb5 checks if the kdc you talk to is not a fake by using the host > principal in the default keytab. Look at the traffic on port 88 with > ethereal and you should see a tgt request for host/server-fqdn. Some pam > modules have an option to not do t

Re: PAM hangs after authenticating against 2003 AD

2006-08-12 Thread Jesper Angelo
I have trimmed down the configs heavily, so now I still can't login, but at least I get a login incorrect. Lets see... > Clear the auth log and login as I said /locally/ with a /pure/ /local/ > user. See what happens working with this user. If you can work and > you're not kicked out, then kinit t

Re: PAM hangs after authenticating against 2003 AD

2006-08-12 Thread Jesper Angelo
Just adding - this is what I get in the event log on the AD: - Authentication Ticket Request: User Name: newbie Supplied Realm Name:BORSEN-ONLINE.DK User ID:ONLI

Re: PAM hangs after authenticating against 2003 AD

2006-08-12 Thread Markus Moeller
You still have "Server not found in Kerberos database" in your log. Could you capture the TGS REQ and reply with ethereal ? Sometime the issue is a wrong hosts entry (e.g. the shorthostname is in front of the FQDN). Markus "Jesper Angelo" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTE

Re: PAM hangs after authenticating against 2003 AD

2006-08-14 Thread Jesper Angelo
Additional info: Local login works using pam_unix... Even if I put pam_unix to be optional (ie all passwords are accepted) it works - except if I put in the right password from the AD. So its something with the kerberos process in pam_krb5... j- ___

Re: PAM hangs after authenticating against 2003 AD

2006-08-15 Thread Sensei
On 2006-08-10 15:41:52 +0200, "Jesper Angelo" <[EMAIL PROTECTED]> said: > I have trimmed down the configs heavily, so now I still can't login, > but at least I get a login incorrect. Lets see... > >> Clear the auth log and login as I said /locally/ with a /pure/ /local/ >> user. See what happens