* Authentication failure
@ 2003-11-12 1:09 Dale Amon
2003-11-12 2:40 ` Russell Coker
0 siblings, 1 reply; 3+ messages in thread
From: Dale Amon @ 2003-11-12 1:09 UTC (permalink / raw)
To: Russell Coker; +Cc: selinux
I'm getting 'Authentication Failure' when I go to login.
This is a freshly installed system (disk image built
elsewhere and rolled in). I can log in if I boot
single user; that way I was able to label the file
system and then reboot via the initrd... but the
full selinux boot also gives 'Authentication failure'.
Could it be there is still some conflict in packages
between Coker, Walters and sid?
Any suggestions on what to try next?
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Authentication failure
2003-11-12 1:09 Authentication failure Dale Amon
@ 2003-11-12 2:40 ` Russell Coker
2003-11-12 9:37 ` Dale Amon
0 siblings, 1 reply; 3+ messages in thread
From: Russell Coker @ 2003-11-12 2:40 UTC (permalink / raw)
To: Dale Amon; +Cc: selinux
On Wed, 12 Nov 2003 12:09, Dale Amon wrote:
> I'm getting 'Authentication Failure' when I go to login.
> This is a freshly installed system (disk image built
> elsewhere and rolled in). I can log in if I boot
> single user; that way I was able to label the file
> system and then reboot via the initrd... but the
> full selinux boot also gives 'Authentication failure'.
>
> Could it be there is still some conflict in packages
> between Coker, Walters and sid?
Recently I have been working on changes to pam and policy to lock down access
to /etc/shadow. These changes are inter-dependent, so if you change one
without the other then the result is a broken system.
I guess that you are either not running my pam packages or you are not running
the latest policy.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Authentication failure
2003-11-12 2:40 ` Russell Coker
@ 2003-11-12 9:37 ` Dale Amon
0 siblings, 0 replies; 3+ messages in thread
From: Dale Amon @ 2003-11-12 9:37 UTC (permalink / raw)
To: Russell Coker; +Cc: selinux
On Wed, Nov 12, 2003 at 01:40:20PM +1100, Russell Coker wrote:
> On Wed, 12 Nov 2003 12:09, Dale Amon wrote:
> > I'm getting 'Authentication Failure' when I go to login.
> > This is a freshly installed system (disk image built
> > elsewhere and rolled in). I can log in if I boot
> > single user; that way I was able to label the file
> > system and then reboot via the initrd... but the
> > full selinux boot also gives 'Authentication failure'.
> >
> > Could it be there is still some conflict in packages
> > between Coker, Walters and sid?
>
> Recently I have been working on changes to pam and policy to lock down access
> to /etc/shadow. These changes are inter-dependent, so if you change one
> without the other then the result is a broken system.
>
> I guess that you are either not running my pam packages or you are not running
> the latest policy.
I've built with this sources.list:
deb http://www.coker.com.au/newselinux/ ./
deb http://web.verbum.org/debian/ ./experimental/
deb http://ftp.de.debian.org/debian/ sid main non-free contrib
deb http://non-us.debian.org/debian-non-US sid/non-US main contrib non-free
and this preferences:
Package: *
Pin: release l=coker
Pin-Priority: 1100
and looking at your Release file, it appears you are 'etbe' rather than
'coker' so I'll be that's where I got screwed.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2003-11-12 9:37 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-11-12 1:09 Authentication failure Dale Amon
2003-11-12 2:40 ` Russell Coker
2003-11-12 9:37 ` Dale Amon
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.