Re: shadowexpired user in FreeBSD??

[Chi Min Wang <cmwang [at] green-computing.com>]

Arthur de Jong wrote:
> How your PAM stack works really depends on how it is configured in
> /etc/pam.d/dovecot (probably). I'm not really sure about the FreeBSD
> PAM stack but from your logs it seems that the pam_ldapd module is
> called at least for authentication (auth).
>
> It also needs to be called for authorisation (account) and I don't see
> that in your logs.
>
> There is also in the logs:
>
> Jun 11 14:38:48 ldap dovecot: auth: Error: auth worker: Aborted PASSV
> request for test: Worker process died unexpectedly
> Jun 11 14:38:48 ldap dovecot: auth-worker: Fatal: master: service(auth-
> worker): child 67159 killed with signal 11 (core not dumped)
>
> which indicates a crash. If the pam_ldapd module causes this I would
> like to know. If you could provide a backtrace from this crash it would
> be helpful.
>
> You can configure debug logging of the pam_ldapd module by adding debug
> to the pam_ldapd.so argument list in your PAM configuration. You could
> also post your PAM config (/etc/pam.d/dovecot) for more details.

Thanks for your reply.  Please see the attach files,in ldap-account.log. 
If the account isn't expired,pam_ldap.so could call pam_sm_acct_mgmt() 
and authorization correctly. If the account is expired,pam_ldap.so seems 
tries to open PAM_CONV to inform pam_sm_acct_mgmt(),but 
pam_sm_act_mgmt() doesn't recognize and didn't handle it correctly(just 
simply died).  Could you tell me what will pam_ldap.so send to 
pam_sm_acct_mgmt() via PAM_CONV? Thanks anyway!!
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 11 12:00:55 ldap auth: in pam_get_user(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 11 12:00:55 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_authtok(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 11 12:00:55 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:00:55 ldap auth: in pam_vprompt(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 11 12:00:55 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: nslcd authentication; user=cmwang
Jun 11 12:00:55 ldap auth: authentication succeeded
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): success
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 11 12:00:55 ldap auth: in pam_get_user(): entering
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:00:55 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:00:55 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:00:55 ldap auth: nslcd authorisation; user=cmwang
Jun 11 12:00:55 ldap auth: authorization succeeded
Jun 11 12:00:55 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_acct_mgmt(): success

Jun 11 12:00:55 ldap dovecot: pop3-login: Login: user=<cmwang>, method=PLAIN, 
rip=127.0.0.1, lip=127.0.0.1, mpid=9430, secured, session=<rqTMP6dRrd5/AAAB>
Jun 11 12:00:55 ldap dovecot: pop3(cmwang): Error: User initialization failed: 
Namespace '': mkdir(/home/it/network/cmwang/Maildir) failed: Permission denied 
(euid=1001(cmwang) egid=1(daemon) missing +w perm: /home, dir owned by 0:0 
mode=0755)
Jun 11 12:00:55 ldap dovecot: pop3: Error: Invalid user settings. Refer to 
server log for more information.


Jun 11 12:01:18 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 11 12:01:18 ldap auth: in pam_get_user(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 11 12:01:18 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_authtok(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 11 12:01:18 ldap auth: in openpam_get_option(): returning NULL
Jun 11 12:01:18 ldap auth: in pam_vprompt(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 11 12:01:18 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: nslcd authentication; user=test
Jun 11 12:01:18 ldap auth: authentication succeeded
Jun 11 12:01:18 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): success
Jun 11 12:01:18 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 11 12:01:18 ldap auth: in pam_get_user(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 11 12:01:18 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 11 12:01:18 ldap auth: nslcd authorisation; user=test
Jun 11 12:01:18 ldap auth: in pam_vprompt(): entering
Jun 11 12:01:18 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 11 12:01:18 ldap auth: in pam_get_item(): returning PAM_SUCCESS

Jun 11 12:01:18 ldap dovecot: auth: Error: auth worker: Aborted PASSV request 
for maggietest: Worker process died unexpectedly
Jun 11 12:01:18 ldap dovecot: auth-worker: Fatal: master: service(auth-worker): 
child 9429 killed with signal 11 (core not dumped - set service auth-worker { 
drop_priv_before_exec=yes })
Jun 11 12:01:22 ldap dovecot: pop3-login: Aborted login (auth failed, 1 
attempts in 4 secs): user=<test>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, 
secured, session=<JwYnQadR2D5/AAAB>

Jun 12 13:46:50 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 12 13:46:50 ldap auth: in pam_get_user(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:46:50 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 12 13:46:50 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:46:50 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_authtok(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:46:50 ldap auth: in pam_vprompt(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 12 13:46:50 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: nslcd authentication; user=mailadmin
Jun 12 13:46:50 ldap auth: user not handled by nslcd
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): unknown user
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/lib/pam_unix.so.5
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'auth_as_self'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:46:50 ldap auth: in pam_get_user(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_sm_authenticate(): Got user: mailadmin
Jun 12 13:46:50 ldap auth: in pam_sm_authenticate(): Doing real authentication
Jun 12 13:46:50 ldap auth: in pam_get_authtok(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 12 13:46:50 ldap auth: in openpam_get_option(): returning ''
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_sm_authenticate(): Got password
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): /usr/lib/pam_unix.so.5: 
pam_sm_authenticate(): success
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 12 13:46:50 ldap auth: in pam_get_user(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:46:50 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: nslcd authorisation; user=mailadmin
Jun 12 13:46:50 ldap auth: user not handled by nslcd
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_acct_mgmt(): unknown user
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/lib/pam_unix.so.5
Jun 12 13:46:50 ldap auth: in pam_get_user(): entering
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_sm_acct_mgmt(): Got user: mailadmin
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:46:50 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:46:50 ldap auth: in pam_sm_acct_mgmt(): Got login_cap
Jun 12 13:46:50 ldap auth: in openpam_dispatch(): /usr/lib/pam_unix.so.5: 
pam_sm_acct_mgmt(): success
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/local/lib/pam_ldap.so
Jun 12 13:47:12 ldap auth: in pam_get_user(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:47:12 ldap auth: in pam_get_data(): returning PAM_NO_MODULE_DATA
Jun 12 13:47:12 ldap auth: in pam_set_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:47:12 ldap auth: in pam_set_data(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_authtok(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'use_first_pass'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'authtok_prompt'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK_PROMPT
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in openpam_subst(): entering: 'Password for %u@%h:'
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in openpam_subst(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'echo_pass'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:47:12 ldap auth: in pam_vprompt(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_CONV
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_vprompt(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_set_item(): entering: PAM_AUTHTOK
Jun 12 13:47:12 ldap auth: in pam_set_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: nslcd authentication; user=mailadmin
Jun 12 13:47:12 ldap auth: user not handled by nslcd
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_authenticate(): unknown user
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): calling pam_sm_authenticate() 
in /usr/lib/pam_unix.so.5
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'auth_as_self'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning NULL
Jun 12 13:47:12 ldap auth: in pam_get_user(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_sm_authenticate(): Got user: mailadmin
Jun 12 13:47:12 ldap auth: in pam_sm_authenticate(): Doing real authentication
Jun 12 13:47:12 ldap auth: in pam_get_authtok(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_HOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_OLDAUTHTOK
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in openpam_get_option(): entering: 'try_first_pass'
Jun 12 13:47:12 ldap auth: in openpam_get_option(): returning ''
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_AUTHTOK
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_authtok(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_sm_authenticate(): Got password
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): /usr/lib/pam_unix.so.5: 
pam_sm_authenticate(): success
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/local/lib/pam_ldap.so
Jun 12 13:47:12 ldap auth: in pam_get_user(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_data(): entering: 'PAM_LDAPD_CTX'
Jun 12 13:47:12 ldap auth: in pam_get_data(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_SERVICE
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RUSER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: nslcd authorisation; user=mailadmin
Jun 12 13:47:12 ldap auth: user not handled by nslcd
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): /usr/local/lib/pam_ldap.so: 
pam_sm_acct_mgmt(): unknown user
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): calling pam_sm_acct_mgmt() in 
/usr/lib/pam_unix.so.5
Jun 12 13:47:12 ldap auth: in pam_get_user(): entering
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_USER
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_user(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_sm_acct_mgmt(): Got user: mailadmin
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_RHOST
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_get_item(): entering: PAM_TTY
Jun 12 13:47:12 ldap auth: in pam_get_item(): returning PAM_SUCCESS
Jun 12 13:47:12 ldap auth: in pam_sm_acct_mgmt(): Got login_cap
Jun 12 13:47:12 ldap auth: in openpam_dispatch(): /usr/lib/pam_unix.so.5: 
pam_sm_acct_mgmt(): user account has expired

Attachment: pam_sm_acct_mgmt.PNG
Description: PNG image

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/nss-pam-ldapd-users/