Subject: Re: PAM and Xserver
To: None <current-users@netbsd.org>
From: Jukka Salmi <j+nbsd@2005.salmi.ch>
List: current-users
Date: 03/02/2005 00:13:44
Christos Zoulas --> current-users (2005-03-01 17:39:34 -0500):
> In article <20050301221839.GA7240@moray.salmi.ch>,
> Jukka Salmi  <j+nbsd@2005.salmi.ch> wrote:
[...]
> >No, unfortunately not. I'm using Kerberos V (except for root which has
> >a local password). I'm able to start X using startx as root, but not
> >as a non-root user:
> >
> >$ startx
> >
> >jukka@SALMI.CH's Password:
> >Password:
> >
> >Fatal server error:
> >PAM authentication failed, cannot start X server.
> >        Perhaps you do not have console ownership?
> >
> >
> >Note the password prompt...
> 
> So you see both prompts before typing anything?

Yes. I'm not able to enter the password.


> >If I start /usr/X11R6/bin/XFree86 directly (as a non-root user) I'm asked
> >for my Kerberos password; if entered correctly, X starts fine; otherwise
> >same error message as above.
> 
> So you see the first prompt and then you type the krb password and
> everything works?

Correct.


> >Adding a "auth sufficient pam_self.so" to /etc/pam.d/xserver seems to fix
> >the problem (but then xconsole complains: "Couldn't open console"), but
> >since I don't really know PAM I'm not sure if this is correct.
> 
> Who owns /dev/console at that point, and who owns it in the working case?

/dev/console is always owned by root:tty (mode 0622) except when using
xdm to log in, in which case I own it.


Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~