[gentoo-user] Re: entrance login fails

[Mick]

On Sunday 19 Feb 2017 12:03:33 Mick wrote:
> I am guessing there is something not being set in the /etc/pam.d/entrance
> file which was installed with entrance.  I am getting a wrong credentials
> error, when both my username and passwd are entered correctly.
>
> This is the file installed by entrance:
>
> $ cat /etc/pam.d/entrance
> #%PAM-1.0
> auth    requisite       pam_nologin.so
> auth    required        pam_env.so readenv=1
> auth    required        pam_env.so readenv=1 envfile=/etc/default/locale
> @include common-auth
> auth    optional        pam_gnome_keyring.so
> @include common-account
> session required        pam_limits.so
> @include common-session
> session optional        pam_gnome_keyring.so auto_start
> @include common-password
>
>
> In contrast the sddm pam file looks like this:
>
> $ cat /etc/pam.d/sddm
> #%PAM-1.0
>
> auth		include		system-login
> account		include		system-login
> password	include		system-login
> session		include		system-login
> -auth		optional	pam_kwallet.so kdehome=.kde4
> -auth		optional	pam_kwallet5.so
> -session	optional	pam_kwallet.so
> -session	optional	pam_kwallet5.so auto_start
>
>
> The sddm pam file works fine, but I do not want to start hacking the
> entrance pam file without understainding what all these pam_foo.so
> directives do.  What do you suggest I need to change in it to make pam like
> my user/passwd?
>
> PS.  I do not use Gnome on this box.

I had a look at /var/log/messages and then commented out entries in 
/etc/pam.d/entrance about gnome and @include, because they were causing 
errors.

Then added some of the syntax I borrowed from the sddm pam file, but I do not 
know if the final entrance pam file is correct/safe enough.  In any case it 
allows me to login:

#%PAM-1.0
#auth    requisite       pam_nologin.so
#auth    required        pam_env.so readenv=1
auth    include         system-login
auth    required        pam_env.so
account include         system-login
#auth    required        pam_env.so readenv=1 envfile=/etc/default/locale
#@include common-auth
#auth    optional        pam_gnome_keyring.so
#@include common-account
session include         system-login
session required        pam_unix.so
session required        pam_limits.so
#@include common-session
#session optional        pam_gnome_keyring.so auto_start
#@include common-password
-auth           optional        pam_kwallet.so kdehome=.kde4
-auth           optional        pam_kwallet5.so
-session        optional        pam_kwallet.so
-session        optional        pam_kwallet5.so auto_start

Please let me know if something in the above is incorrect/dangerous ...

-- 
Regards,
Mick