Authentication not working on CentOS 6.2/ cups1.4.7

[Paul Conklin]

odd, on my 5.7 box, i have this

auth    required        pam_unix.so shadow nodelay
account required        pam_unix.so


i replaced that on my 6.2 box and now it works, Thanks as always Michael!


> well, that's getting me further.
>
> auth    required        pam_unknown.so nodelay
> account required        pam_unknown.so
>
> /var/log/secure shows this
> Mar 20 13:32:57 localhost cupsd: PAM unable to dlopen(/lib64/security/pam_unknown.so): /lib64/security/pam_unknown.so: cannot open shared object file: No such file or directory
> Mar 20 13:32:57 localhost cupsd: PAM adding faulty module: /lib64/security/pam_unknown.so
>
> those files don't exist.  thoughts as to what I should put in there?
>
> > Paul,
> >
> > Check your /etc/pam.d/cups file - the modules listed there are likely wrong for your distro.
> >
> >
> > On Mar 20, 2012, at 1:12 PM, Paul Conklin <paul.conklin at cerner.com> wrote:
> >
> > > [root at localhost cups]# grep ^E error_log
> > > E [20/Mar/2012:13:05:26 -0700] cupsdAuthorize: pam_authenticate() returned 28 (Module is unknown)!
> > > E [20/Mar/2012:13:05:29 -0700] cupsdAuthorize: pam_authenticate() returned 28 (Module is unknown)!
> > > E [20/Mar/2012:13:05:29 -0700] Fatal error during SSL shutdown!
> > >
> > >
> > >> i build rpm's on my builder box that I know has SSL and everything on it.  that resolved my issues with not being able to get to https:// side of the house, but it never accepts the password.  i kicked it up to debug and i do get an error for "Fatal error during SSL shutdown!".  any ideas on what to look for next?
> > >>
> > >> I [20/Mar/2012:13:05:29 -0700] Started "/usr/lib/cups/cgi-bin/admin.cgi" (pid=22953)
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdSendCommand: 10 file=14
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] admin.cgi started...
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdAcceptClient: 12 from localhost (Domain)
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] http=0x7fa465c4fa70
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] org.cups.sid cookie is "3b4638bb4980d4184a798733481e153c"
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] op="config-server"...
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] DefaultAuthType Basic
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdReadClient: 12 PUT /admin/conf/cupsd.conf HTTP/1.1
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdAuthorize: No authentication data provided.
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdIsAuthorized: username=""
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdSendHeader: 12 WWW-Authenticate: Basic realm="CUPS", trc="y"
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 12
> > >> D [20/Mar/2012:13:05:29 -0700] [CGI] cgi_passwd(prompt="Password for lp on localhost? ") called!
> > >> D [20/Mar/2012:13:05:29 -0700] Script header: Status: 401
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdSendHeader: 10 WWW-Authenticate: Basic realm="CUPS"
> > >> D [20/Mar/2012:13:05:29 -0700] Script header:
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdWriteClient: 10 Closing because Keep-Alive disabled
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 10
> > >> E [20/Mar/2012:13:05:29 -0700] Fatal error during SSL shutdown!
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdSetBusyState: Not busy
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdReadClient: 10 WAITING Closing on EOF
> > >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 10
> > >> D [20/Mar/2012:13:05:29 -0700] PID 22953 (/usr/lib/cups/cgi-bin/admin.cgi) was terminated normally with signal 15
> > >>
> > >>> More than likely CUPS either isn't compiled with SSL support ("ldd /usr/sbin/cupsd" will show) or is unable to create a certificate.
> > >>>
> > >>>
> > >>> On Mar 20, 2012, at 9:10 AM, Paul Conklin wrote:
> > >>>
> > >>>> for some reason, when I try and authenticate via the WI on cups 1.4.7 on centos 6.2, it doesn't re-direct to https.  also if i manually go to https it doesn't resolve to an actual page.  I'm sure I'm missing a package or something, but not sure what I'm missing.  openssl is installed and i'm using the same cupsd.conf files that work just fine on 5.6 centos.
> > >>>> _______________________________________________
> > >>>> cups mailing list
> > >>>> cups at easysw.com
> > >>>> http://lists.easysw.com/mailman/listinfo/cups
> > >>>
> > >>> _________________________________________________________
> > >>> Michael Sweet, Senior Printing System Engineer, PWG Chair
> > >>>
> > >>
> > >
> > > _______________________________________________
> > > cups mailing list
> > > cups at easysw.com
> > > http://lists.easysw.com/mailman/listinfo/cups
> >
> > __________________________________________________
> > Michael Sweet, Senior Printing System Engineer, PWG Chair
> >
>