https://wikiold.home.tartarefr.eu/index.php?action=history&feed=atom&title=Security%2FPamUsb%2FTroubleshooting 2026-07-09T11:52:11Z Historique des versions pour cette page sur le wiki MediaWiki 1.43.8 https://wikiold.home.tartarefr.eu/index.php?title=Security/PamUsb/Troubleshooting&diff=1018&oldid=prev 2012-12-13T14:11:05Z

<p>Page créée avec « = Troubleshooting = Don&#039;t panic! == Log Analysis == Both pam_usb.so and pamusb-agent use the syslog facility to log authentication attempts. This can be useful for GUI-dri... »</p> <p><b>Nouvelle page</b></p><div>= Troubleshooting =<br /> <br /> Don&#039;t panic!<br /> <br /> == Log Analysis ==<br /> <br /> Both pam_usb.so and pamusb-agent use the syslog facility to log authentication<br /> attempts.<br /> This can be useful for GUI-driven applications (for instance GDM) where you<br /> don&#039;t get to see console output.<br /> Messages are logged with the AUTH facility, they are usually written to<br /> &lt;path&gt;/var/log/auth.log&lt;/path&gt; but may vary<br /> depending on the operating system you&#039;re using.<br /> <br /> # tail -f /var/log/auth.log<br /> pamusb-agent[25429]: Device &quot;sandisk&quot; has been inserted. Performing<br /> verification...<br /> pamusb-agent[25429]: Executing &quot;/usr/bin/pamusb-check --quiet<br /> --config=/etc/pamusb.conf --service=pamusb-agent scox&quot;<br /> pam_usb[25485]: Authentication request for user &quot;scox&quot; (pamusb-agent)<br /> pam_usb[25485]: Device &quot;sandisk&quot; is connected (good).<br /> pam_usb[25485]: Access granted.<br /> pamusb-agent[25429]: Authentication succeeded. Unlocking user &quot;scox&quot;...<br /> pamusb-agent[25429]: Unlocked.<br /> <br /> == Enabling debug ==<br /> <br /> Enabling debug messages may help you find out what&#039;s wrong.<br /> <br /> To enable them, edit &lt;path&gt;/etc/pamusb.conf&lt;/path&gt; and set the following option:<br /> <br /> &lt;syntaxhighlight lang=&quot;xml&quot;&gt;<br /> &lt;defaults&gt;<br /> &lt;option name=&quot;debug&quot;&gt;true&lt;/option&gt;<br /> &lt;/defaults&gt;<br /> &lt;/syntaxhighlight&gt;<br /> You can enable debug messages only for a specific user, device or service.<br /> <br /> &lt;syntaxhighlight lang=&quot;xml&quot;&gt;<br /> &lt;services&gt;<br /> &lt;service id=&quot;sudo&quot;&gt;<br /> &lt;option name=&quot;debug&quot;&gt;true&lt;/option&gt;<br /> &lt;/service&gt;<br /> &lt;/services&gt;<br /> &lt;/syntaxhighlight&gt;</div>

Didier