Am 29.07.23 um 12:15 schrieb stefan....@harnet.de:
root@dsme01:~# cat /etc/pam.d/bareos
auth       required     pam_unix.so
## auth       required     pam_sss.so
account    required     pam_unix.so
account    required     pam_permit.so
...

pam_unix.so will usually require read access to /etc/shadow, you mentioned that you added bareos to the "root" group. However, on Fedora/RHEL this doesn't seem to do a thing and on Debian the required group is called "shadow" instead.

Long story short: make sure the bareos director can read /etc/shadow or - if you want LDAP - don't try setting up pam_unix first, because it usually requires root privileges in the process calling PAM.

Best Regards,
Andreas

--
Andreas Rogge                             andreas.ro...@bareos.com
  Bareos GmbH & Co. KG                      Phone: +49 221-630693-86
  http://www.bareos.com

  Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
  Komplementär: Bareos Verwaltungs-GmbH
  Geschäftsführer: Stephan Dühr, Jörg Steffens, Philipp Storz

--
You received this message because you are subscribed to the Google Groups 
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to bareos-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/bareos-users/233f0afe-1687-5c64-4fc4-c62ade9f3977%40bareos.com.

Attachment: OpenPGP_0x00314758866BD59E.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to