Subject: Re: PAM and Xserver
To: None <current-users@netbsd.org>
From: Jukka Salmi <j+nbsd@2005.salmi.ch>
List: current-users
Date: 03/02/2005 11:21:01
Jukka Salmi --> current-users (2005-03-02 00:13:44 +0100):
> Christos Zoulas --> current-users (2005-03-01 17:39:34 -0500):
> > In article <20050301221839.GA7240@moray.salmi.ch>,
> > Jukka Salmi  <j+nbsd@2005.salmi.ch> wrote:
> [...]
> > >No, unfortunately not. I'm using Kerberos V (except for root which has
> > >a local password). I'm able to start X using startx as root, but not
> > >as a non-root user:
> > >
> > >$ startx
> > >
> > >jukka@SALMI.CH's Password:
> > >Password:
> > >
> > >Fatal server error:
> > >PAM authentication failed, cannot start X server.
> > >        Perhaps you do not have console ownership?
> > >
> > >
> > >Note the password prompt...
> > 
> > So you see both prompts before typing anything?
> 
> Yes. I'm not able to enter the password.

Revision 1.2 of xinit.c changed this behaviour: now I can enter the
password and X starts fine. But do I really need to enter my password
twice (once for login and once for X)?


> > >If I start /usr/X11R6/bin/XFree86 directly (as a non-root user) I'm asked
> > >for my Kerberos password; if entered correctly, X starts fine; otherwise
> > >same error message as above.
> > 
> > So you see the first prompt and then you type the krb password and
> > everything works?
> 
> Correct.
> 
> 
> > >Adding a "auth sufficient pam_self.so" to /etc/pam.d/xserver seems to fix
> > >the problem (but then xconsole complains: "Couldn't open console"), but
> > >since I don't really know PAM I'm not sure if this is correct.
> > 
> > Who owns /dev/console at that point, and who owns it in the working case?
> 
> /dev/console is always owned by root:tty (mode 0622) except when using
> xdm to log in, in which case I own it.
> 
> 
> Regards, Jukka
> 
> -- 
> bashian roulette:
> $ ((RANDOM%6)) || rm -rf ~

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~