If the syslog messages do not provide enough information, the trace mode can provide more details. For each password update operation, the trace module generates a file named /tmp/pam_CA_eta-trace.<nnnn> (where <nnnn> is the PID of the passwd process) with an entry for most of the function calls used by the module and the data used or returned by those functions.
Even though the trace files are only readable by the root account, they will contain the clear-text new passwords. For this reason, this parameter should not be used permanently on a production system.
Copyright © 2013 CA.
All rights reserved.
|
|