Version: packaged with 3.5.2-0.2.fc5 (using KDE KDE 3.5.2) Installed from: Fedora RPMs OS: Linux The default installation of kdebase, kcheckpass cannot authenticate vs a LDAP directory. One of the consequence is that one cannot unlock its screensaver. The fix is to chmod +s `which kcheckpass`, as described in http://lists.debian.org/debian-qt-kde/2005/03/msg00044.html.
you wouldn't believe it, but we actually do this. :) please report a packaging bug against fedora.
Oswald, the setuid mask causes the problem if you uses pam_krb5 for pam backends to authenticate. ------- Relevant /var/log/messages ------ Jun 21 10:45:02 xt23 kcheckpass: pam_krb5[27538]: TGT verified using key for 'host/xt23.mth.udmn.de@MTH.UDMN.DE' Jun 21 10:45:02 xt23 kcheckpass: pam_krb5[27538]: authentication succeeds for 'mad' (mad@MTH.UDMN.DD) Jun 21 10:45:02 xt23 kcheckpass: pam_krb5[27538]: won't refresh credentials while running setuid/setgid Do you know why pam_ldap requires root priviliges? It seems a conflict here.