Return
-
Title
Local users are being prompted twice for a password -
Description
After installing Authentication Services local users are presented with two login prompts when trying to authenticate.When joining a Privelege Manager for sudo client with a command,it fails to authenticate to the policy server. It seems like the policy server asks for the password two times. -
Cause
The "use_first_pass" option was missing from the pam_unix.so module in the PAM configuration file. -
Resolution
Make sure that your pam_unix.so module comes after the pam_vas3.so module in your PAM stack, and make sure that the "use_first_pass" option is used.This is a standard Redhat Enterprise Linux PAM configuration showing the default PAM stack:auth required pam_env.soauth sufficient pam_vas3.so create_homedir get_nonvas_pass try_first_passauth requisite pam_vas3.so echo_returnauth sufficient pam_unix.so nullok try_first_pass use_first_passauth requisite pam_succeed_if.so uid >= 500 quietauth required pam_deny.so