[rsbac] problem with RSBAC - UM

Amon Ott ao at rsbac.org
Tue Mar 27 14:15:01 CEST 2007


On Tuesday 27 March 2007 13:41, Bartosz Brodecki wrote:
> I want to use rsbac UM module, but when I install this with
> instruction I may login, change password, but system doesn't see
> username and group name, for example:
> when I wrote: "whoami" I get: "whoami: connot find name for user ID
> 1000"
>
> my config files:
> ---- nsswitch.conf -------
> passwd: rsbac
> group: rsbac
> shadow: rsbac
>
> hosts: files
> etc.
> ------------------------------
> ---- /etc/pam.d/common-auth ------------------
> auth	required		pam_env.so
> auth	required		pam_rsbac.so
> ---------------------------------------------
> and so on - when I have pam_unix2.so I wrote pam_rsbac.so

This looks ok. You should enable UM debugging with
echo "debug aef_um 1" >/proc/rsbac-info/debug
to get more info. Also, the output of "rsbac_usershow 1000" might 
help.

Are you sure that nsswitch.conf is used by your programs? It looks as 
if pam was working, but nss not. Where is your libnss_rsbac.so? If it 
is in /usr/local/lib, you might be missing that dir in 
your /etc/ld.so.conf.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list