![]() |
On Tue, 30 Nov 2004, Patrice Fournier wrote: > Quoting Gerry Doris <gdoris@xxxxxxxxxx>: > > > Now when I telnet into the server (from the server) and try and login > > using the user command I get > > > > 230 USER gerry logged in > > > > immediately followed by > > > > Connection closed by foreign host > > > > What I have also found is that in my log files I'm seeing is > > > > HylaFAX: CAUGHT SIGNAL 11 > > This may have something to do with PAM support. There is a patch on > bugzilla that may fix this ( See bug 581: > http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=581 ). It is already in > current CVS. > > If this doesn't fix the problem, you could try disabling PAM support at > compilation time and try again. If this solves the problem (and patch on > bug 581 didn't), we'd need more information about your system setup so we > can try to reproduce this: what's the content of /etc/nsswitch.conf, > /etc/pam.d/hylafax (if it exists) and /etc/pam.d/other. Also, a trace of > hfaxd during a connection would also help. > > If you can't recompile and /etc/nsswitch.conf contains a "group" line with > a value other than "compat", change it to "compat", do one more test and > report back the result (with the original value) (revert the change to > /etc/nsswitch.conf if you don't understand what it does as it may affect > other programs...) > > -- > Patrice Fournier OK, I removed the 4.1.8 rpm and installed the source for 4.2.0. I compiled the source and installed it successfully but had same signal 11 problem as I had previously when I was using the 4.2.0 rpm. I downloaded and installed the 581 patch recompiled/installed but the problem was still there. I tried changing the nsswitch.conf file group line to compat but that didn't make a difference. I then recompiled with the --disable-pam switch and the problem went away!!! So you were right. This has something to do with my pam configuration. I have attached the following files as requested... /etc/nsswitch.conf /etc/pam.d/hylafax doesn't exist /etc/pam.d/other I don't know how to get a trace of hfaxd during a connection. Let me know how and I'll provide it if required. This server is running Fedora Core 2. It has been upgraded many times starting with a very old version of Redhat. It has undoubtedly got a lot of garbage stuffed away in dusty corners and is well overdue for a clean install...but it is generally very solid! -- Gerry "The lyfe so short, the craft so long to learne" Chaucer
# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis passwd: files nisplus shadow: files nisplus group: files nisplus #hosts: db files nisplus nis dns hosts: files dns nis # Example - obey only what nisplus tells us... #services: nisplus [NOTFOUND=return] files #networks: nisplus [NOTFOUND=return] files #protocols: nisplus [NOTFOUND=return] files #rpc: nisplus [NOTFOUND=return] files #ethers: nisplus [NOTFOUND=return] files #netmasks: nisplus [NOTFOUND=return] files bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files nisplus rpc: files services: files nisplus netgroup: files nisplus publickey: nisplus automount: files nisplus aliases: files nisplus
#%PAM-1.0 auth required /lib/security/$ISA/pam_deny.so account required /lib/security/$ISA/pam_deny.so password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_deny.so