Ask Your Question
0

xscreensaver Authentication failed Ad user pam_winbond.

asked 2016-02-18 17:05:50 -0500

updated 2016-02-19 09:54:03 -0500

aeperezt gravatar image

Hello. I installed Fedora 23 and joined to an active directory domain using realmd as in the Red Hat document. Everything works, my system uses Kerberos tickets and I can "sudo" with my AD user.

My problem is xsceensaver. It does not let me log back in after blocking the screen due to an "authentication failure". I searched the logs and found this:

Feb 18 18:00:36 pc14112lnx xscreensaver: pam_sss(xscreensaver:auth): authentication success; logname= uid=414413584 euid=414413584 tty=:0.0 ruser= rhost= user=nconde
Feb 18 18:00:36 pc14112lnx xscreensaver: pam_sss(xscreensaver:account): Access denied for user nconde: 6 (Permission denied)
Feb 18 18:00:36 pc14112lnx xscreensaver: pam_winbind(xscreensaver:account): valid_user: wbcGetpwnam gave WBC_ERR_WINBIND_NOT_AVAILABLE
Feb 18 18:00:36 pc14112lnx xscreensaver[6886]: FAILED LOGIN 1 ON DISPLAY ":0.0", FOR "nconde"
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: pam_sss(xscreensaver:auth): authentication failure; logname= uid=414413584 euid=414413584 tty=:0.0 ruser= rhost= user=nconde
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: pam_sss(xscreensaver:auth): received for user nconde: 7 (Authentication failure)
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: pam_winbind(xscreensaver:auth): getting password (0x00000210)
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: pam_winbind(xscreensaver:auth): pam_get_item returned a password
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: pam_winbind(xscreensaver:auth): internal module error (retval = PAM_AUTHINFO_UNAVAIL(9), user = 'nconde')
Feb 18 18:00:45 pc14112lnx xscreensaver[6886]: FAILED LOGIN 2 ON DISPLAY ":0.0", FOR "nconde"
Feb 18 18:00:52 pc14112lnx xscreensaver[6886]: pam_sss(xscreensaver:auth): authentication success; logname= uid=414413584 euid=414413584 tty=:0.0 ruser= rhost= user=nconde
Feb 18 18:00:52 pc14112lnx xscreensaver[6886]: pam_sss(xscreensaver:account): Access denied for user nconde: 6 (Permission denied)
Feb 18 18:00:52 pc14112lnx xscreensaver[6886]: pam_winbind(xscreensaver:account): valid_user: wbcGetpwnam gave WBC_ERR_WINBIND_NOT_AVAILABLE
Feb 18 18:00:52 pc14112lnx xscreensaver[6886]: FAILED LOGIN 3 ON DISPLAY ":0.0", FOR "nconde"
Feb 18 18:04:00 pc14112lnx xscreensaver: pam_sss(xscreensaver:auth): authentication success; logname= uid=414413584 euid=414413584 tty=:0.0 ruser= rhost= user=nconde
Feb 18 18:04:00 pc14112lnx xscreensaver: pam_sss(xscreensaver:account): Access denied for user nconde: 6 (Permission denied)
Feb 18 18:04:00 pc14112lnx xscreensaver: pam_winbind(xscreensaver:account): valid_user: wbcGetpwnam gave WBC_ERR_WINBIND_NOT_AVAILABLE
Feb 18 18:04:00 pc14112lnx xscreensaver[7370]: FAILED LOGIN 1 ON DISPLAY ":0.0", FOR "nconde"
Feb 18 18:04:02 pc14112lnx xscreensaver[7370]: pam_sss(xscreensaver:auth): authentication failure; logname= uid=414413584 euid=414413584 tty=:0.0 ruser= rhost= user=nconde
Feb 18 18:04:02 pc14112lnx xscreensaver[7370]: pam_sss(xscreensaver:auth): received for user nconde: 7 (Authentication failure)
Feb 18 18:04:02 pc14112lnx xscreensaver[7370]: pam_winbind(xscreensaver:auth): getting password (0x00000210)
Feb 18 18:04:02 pc14112lnx xscreensaver[7370]: pam_winbind(xscreensaver:auth): pam_get_item returned a password
Feb 18 18:04:02 pc14112lnx xscreensaver[7370]: pam_winbind(xscreensaver:auth): internal module error (retval = PAM_AUTHINFO_UNAVAIL(9), user = 'nconde')

using sudo tail -n 100 /var/log/secure | grep xscreensaver.

Can you help me configure xscreensaver ... (mas)

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2016-11-28 13:50:54 -0500

L P gravatar image

I had the same thing but didn't get the pam_winbind log messages. From looking around the problem appears to be because non-root processes (like your screensaver) can't authenticate the account through sss.

For a workaround, I removed the existing 'account' lines from /etc/pam.d/xscreensaver and added just:

account required pam_permit.so
edit flag offensive delete link more

Question Tools

Stats

Asked: 2016-02-18 17:05:50 -0500

Seen: 649 times

Last updated: Feb 19 '16