Re: [Tiki-devel] PAM authentication -- first login attempt fails, but second works

As an update on this, after doing some more digging:

PAM is working:

Apr 28 15:20:42 cs-wiki2 journal[225112]: ool www: pam_sss(php:auth): authentication success; logname= uid=48 euid=48 tty= ruser= rhost= user=snorwood
Apr 28 15:20:42 cs-wiki2 unix_chkpwd[473904]: could not obtain user info (snorwood)
Apr 28 15:20:44 cs-wiki2 journal[293506]: ool www: pam_sss(php:auth): authentication success; logname= uid=48 euid=48 tty= ruser= rhost= user=snorwood
Apr 28 15:20:44 cs-wiki2 unix_chkpwd[473906]: could not obtain user info (snorwood)

both login attempts generate a success response (the unix_chkpwd thing seems
to be non-fatal).

The first login attempt generates a 401 http error:

xxx.xxx.xxx.xxx - - [28/Apr/2022:15:20:42 -0400] "POST /tiki-login.php HTTP/1.1" 401 55167

The second login attempts generates a 302 http response:

xxx.xxx.xxx.xxx - - [28/Apr/2022:15:20:44 -0400] "POST /tiki-login.php HTTP/1.1" 302 -
xxx.xxx.xxx.xxx - - [28/Apr/2022:15:20:44 -0400] "GET /tiki-index.php HTTP/1.1" 200 59285

This second attempt also works if the user does a refresh/resubmit in the
browser.

The user account is created in the tiki database after the first login.

Not sure if this helps.  If PAM authentication is really such an obscure
feature, I may move on to investage LDAP authentication (which, for various
reasons, will be somewhat more complicated in my environment).

- Scott