LDAP PAM configuration fails authentication (pam_acct_mgmt returns permission denied)

[Angelo P. Castellani]

The greeter is not started for the following error:
[+0.88s] DEBUG: pam_acct_mgmt(0x9f9fde8, 0) -> 6 (Permission denied)

Full lightdm.log is attached.

Got on Ubuntu Oneiric Ocelot with latest updates installed:
$ dpkg -l lightdm
ii lightdm 1.0.0-0ubuntu4 Display Manager

[Robert Ancell (robert-ancell)]

What distribution are you using?

[Angelo P. Castellani (ang3l0)]

I am using Ubuntu Oneiric Ocelot with the latest updates installed.

[Sebastien Bacher (seb128)]

is there anything special in your pam setup? do you get the issue every time? can you log in from a vt?

[Angelo P. Castellani (ang3l0)]

> is there anything special in your pam setup?

Yes, I do have ldap authentication configured.

I will try to use lightdm after disabling ldap authetication.

> do you get the issue every time?

Yes.

> can you log in from a vt?

Yes, both using a vt and using gdm.

[Angelo P. Castellani (ang3l0)]

> I will try to use lightdm after disabling ldap authetication.

Even after disabling LDAP authentication using pam-auth-update, the lightdm does not start with the reported error.

I have just tested it on a second machine with a similar setup, and after upgrading at Oneiric I have this bug.

[Sebastien Bacher (seb128)]

Ok, I will let Robert comment but nobody else is getting that issue so far so it's likely something specific in the pam configuration of your machines that trigger the bug

[Angelo P. Castellani (ang3l0)]

My machines are configured with LDAP authentication following the Ubuntu Server guide:
https://help.ubuntu.com/11.04/serverguide/C/openldap-server.html#openldap-auth-config

You may want to try reproducing that configuration...

[Robert Ancell (robert-ancell)]

This is probably due to bug 863630 which is fixed in 1.0.2

[Angelo P. Castellani (ang3l0)]

I can test 1.0.2.. there exists a packaged version of it?

Today I tested 1.0.1, but the bug is still present in it.

[Sebastien Bacher (seb128)]

1.0.2 sould get a SRU to Oneiric soon

[Mose (olivier-caspari)]

hello !!
bug around.
before the login in grphique
start a text interface: "ctrl+alt+F1" login you.
and make,

sudo service gdm reload

bye

[Robert Ancell (robert-ancell)]

Could you please test this in lightdm 1.1.6 (precise)? There has been a change to the way PAM is handled that should resolve this issue.

[Launchpad Janitor (janitor)]

[Expired for lightdm (Ubuntu Precise) because there has been no activity for 60 days.]

[Launchpad Janitor (janitor)]

[Expired for lightdm (Ubuntu) because there has been no activity for 60 days.]