shadowexpired user in FreeBSD??

[Chi Min Wang <cmwang [at] green-computing.com>]

Hello Everyone:
      I am trying to management user account with LDAP in FreeBSD. The 
pam_unix in FreeBSD could inform Dovecot for expired local account 
correctly.  When I set LDAP shadow account expired,nslcd could recognize 
it correctly,but could not inform the Dovecot auth-worker(it just simply 
died unexpectedly). Could anyone give some advise??  Thanks anyway!!

PS:Sorry for my poor English....

*********************************************************
CONFIDENTIALITY NOTICE:This e-mail and any attachments are confidential and may 
be legally privileged.
If you are not the intended recipient, (i) please do not read or disclose to 
others, and (ii) please
notify immediately the sender by reply mail, and (iii) please delete all copies 
of the email from your
system. Failure to follow this process may be unlawful. We greatly appreciate 
your cooperation.
�b�Ӹ��k�Y�N�W��ڡA�k�W���`�P�D�^�|�ҬO���~�ҭn�����s��ij�D�P�D�ԡA�Ӥ��q�l�l���b�������~�����t���B�ӰȪ����n���T
�y���x�A�|�Z�q���B�X���B�]�p�ϡB�޳N�B�s�{�B�t���B�{���B�H�ơB���B�B�]�ȵ����T���q�LE-mail�ǻ��A�k�M�O���~���䪺����
�겣(KM asset)�ӷ��C���O�@��´�����](IP�GIntellectual Property) 
�P�Ӹ����Ӹ��Ʀb�q�l�q�T�W���w���A�����B���o���̷s���l��
�]�֧޳N�A�P�ɤ��ɰ����޻s�y�~���]�ָg���C
�ۼ��ܽ� �Q���q�ѻPNopam�l���޳N�]�֬��Q���A����Nopam�s�@�NProactive Audit 
Engine�q�l�l���]�֧޳N�P���ΡC

Jun 11 12:00:55 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 11 12:00:55 ldap auth: in pam_get_user(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 11 12:00:55 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_authtok(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in pam_vprompt(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 11 12:00:55 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: nslcd authentication; user=cmwang
Jun 11 12:00:55 ldap auth: authentication succeeded
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): success
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 11 12:00:55 ldap auth: in pam_get_user(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: nslcd authorisation; user=cmwang
Jun 11 12:00:55 ldap auth: authorization succeeded
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_acct_mgmt(): success


Jun 11 12:01:18 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 11 12:01:18 ldap auth: in pam_get_user(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 11 12:01:18 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_authtok(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in pam_vprompt(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 11 12:01:18 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: nslcd authentication; user=test
Jun 11 12:01:18 ldap auth: authentication succeeded
Jun 11 12:01:18 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): success
Jun 11 12:01:18 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 11 12:01:18 ldap auth: in pam_get_user(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: nslcd authorisation; user=test
Jun 11 12:01:18 ldap auth: in pam_vprompt(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS

nslcd: version 0.9.7 starting
nslcd: accepting connections
nslcd: [00834d] <passwd(all)> (re)loading /etc/nsswitch.conf
nslcd: [d0722e] <passwd(all)> (re)loading /etc/nsswitch.conf
nslcd: [db522c] <authc="test"> uid=test,ou=network,ou=it,dc=xxxx,dc=com: 
"${shadowMax:--1}": password expired 17239 days ago
nslcd: [6d5add] <authc="test"> uid=test,ou=network,ou=it,dc=xxxx,dc=com: 
"${shadowMax:--1}": password expired 17239 days ago

Jun 11 14:38:24 ldap dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for 
imap, pop3, lmtp
Jun 11 14:38:48 ldap dovecot: auth: Error: auth worker: Aborted PASSV request 
for test: Worker process died unexpectedly
Jun 11 14:38:48 ldap dovecot: auth-worker: Fatal: master: service(auth-worker): 
child 67159 killed with signal 11 (core not dumped)
Jun 11 14:38:52 ldap dovecot: pop3-login: Aborted login (auth failed, 1 
attempts in 4 secs): user=<test>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, 
secured, session=<Skh4dKlR+KF/AAAB>

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/nss-pam-ldapd-users/