[tac_plus] Re: PAM error when login

[john heasley]

Mon, Apr 12, 2010 at 08:41:22AM -0500, Hailu Meng:
> Hi All,
> 
> I'm using PAM for Active Directory authentication. When I checked the
> debugging log from tac_plus, I noticed there is "Error 10.1.69.89 tty1:
> PAM_PROMPT_ECHO_OFF". My login was successful but I don't know what this
> error means. Googled it and didn't find good explanation.

you can ignore that; it shouldn't be recorded as an error, rather as just
debug info.  it was a bug which has been fixed but not yet released.

Index: pwlib.c
===================================================================
--- pwlib.c     (revision 3199)
+++ pwlib.c     (revision 3282)
@@ -485,7 +485,7 @@
        switch (pmpp[i]->msg_style) {
        case PAM_PROMPT_ECHO_OFF:
            if (debug & DEBUG_PASSWD_FLAG)
-               report(LOG_ERR, "%s %s: PAM_PROMPT_ECHO_OFF", session.peer,
+               report(LOG_DEBUG, "%s %s: PAM_PROMPT_ECHO_OFF", session.peer,
                       session.port);
 
            send_authen_reply(TAC_PLUS_AUTHEN_STATUS_GETPASS,
@@ -514,7 +514,7 @@
            break;
        case PAM_PROMPT_ECHO_ON:
            if (debug & DEBUG_PASSWD_FLAG)
-               report(LOG_ERR, "%s %s: PAM_PROMPT_ECHO_ON", session.peer,
+               report(LOG_DEBUG, "%s %s: PAM_PROMPT_ECHO_ON", session.peer,
                       session.port);
 
            send_authen_reply(TAC_PLUS_AUTHEN_STATUS_GETDATA,