Hello,
I am facing a strange issue that I’m not able to troubleshoot. Since the latest sudo update, my regular user account with sudoers permissions is getting locked repeatedly by some process. When this issue started happening I quickly created another admin account for myself from a root shell. That new account does not have this problem and I can unlock the main account using it. But I am not able to figure out which process is causing this and how to stop it from happening?
Here are some logs:
faillock --user aditya
aditya:
When Type Source Valid
2021-01-30 07:31:10 TTY V
2021-01-30 07:31:38 TTY V
2021-01-30 07:31:40 TTY V
as soon as I reset the account, I see this in journalctl
journalctl -f -a -g pam
000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_unix(sudo:auth): conversation failed
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:35:40 aditya-pc audit[175052]: USER_AUTH pid=175052 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:35:40 aditya-pc kernel: audit: type=1100 audit(1612010140.527:3279): pid=175052 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_unix(sudo:auth): conversation failed
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:36:08 aditya-pc audit[175219]: USER_AUTH pid=175219 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:08 aditya-pc kernel: audit: type=1100 audit(1612010168.687:3280): pid=175219 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_unix(sudo:auth): conversation failed
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:36:10 aditya-pc audit[175228]: USER_AUTH pid=175228 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:36:10 aditya-pc kernel: audit: type=1100 audit(1612010170.634:3281): pid=175228 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
^C
I have tried searching for problems related to “pam_unix(sudo:auth): conversation failed” error but those didn’t apply
Please help!
