Re: PAM auth - Mailing list pgsql-hackers

From Satoshi Nagayasu
Subject Re: PAM auth
Date
Msg-id 4497B513.10905@nttdata.co.jp
Whole thread Raw
In response to Re: PAM auth  ("Albe Laurenz" <all@adv.magwien.gv.at>)
Responses Re: PAM auth  (Andrew Dunstan <andrew@dunslane.net>)
List pgsql-hackers
Albe,

Albe Laurenz wrote:
> /etc/pam.d/system-auth probably uses pam_unix.so to authenticate.
> 
> Does the user exist on the machine and have the password you try?

Yes, I have same user name on my linux box and postgresql,
and they have same password (now).

> You could add 'debug' to the pam_unix.so lines in /etc/pam.d/system-auth
> and capture what PAM logs to syslog, maybe that will help.

Finally, by my small program, I found the PAM module is attempting
to read /etc/shadow to authenticate, but /etc/shadow can't be read
by non-superuser privilege.

I know, the postmaster is running under "postgres" user privilege,
so PAM auth will always cause 'permission denied' around /etc/shadow.

How can I solve this? Any ideas?

Thanks.
-- 
NAGAYASU Satoshi <nagayasus@nttdata.co.jp>
Phone: +81-3-3523-8122


pgsql-hackers by date:

Previous
From: "Dave Page"
Date:
Subject: Re: CVS HEAD busted on Windows?
Next
From: Simon Riggs
Date:
Subject: Re: sync_file_range()