PAM tweaks to enable login with blank password from console on CentOS 7.6.1810 Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) 2019 Community Moderator Election Results Why I closed the “Why is Kali so hard” questionPAM login permission deniedpam: action on (unsuccessful) loginHowto Tell if a System authenticate with password only or through PAMUnable to login with password as well as otp in pam moduleUsing pam_listfile.so with radius authenticationUse multiple PAM login methods at once?How to local user login(PAM) with MySQL?PAM: Sequences in Linux Login Password Being Flagged UnexpectedlyPAM: Authentication failure, with valid passwordsetting sudo password different from login password

How to recreate this effect in Photoshop?

What happens to sewage if there is no river near by?

What is a Meta algorithm?

Stars Make Stars

List *all* the tuples!

How do I keep my slimes from escaping their pens?

Why does Python start at index -1 when indexing a list from the end?

Why don't the Weasley twins use magic outside of school if the Trace can only find the location of spells cast?

Right-skewed distribution with mean equals to mode?

Is the address of a local variable a constexpr?

What causes the vertical darker bands in my photo?

What does the "x" in "x86" represent?

What is the longest distance a 13th-level monk can jump while attacking on the same turn?

Why is "Consequences inflicted." not a sentence?

Using et al. for a last / senior author rather than for a first author

How does a Death Domain cleric's Touch of Death feature work with Touch-range spells delivered by familiars?

Does accepting a pardon have any bearing on trying that person for the same crime in a sovereign jurisdiction?

ListPlot join points by nearest neighbor rather than order

Is the Standard Deduction better than Itemized when both are the same amount?

What do you call a plan that's an alternative plan in case your initial plan fails?

Proof involving the spectral radius and Jordan Canonical form

Withdrew £2800, but only £2000 shows as withdrawn on online banking; what are my obligations?

Gastric acid as a weapon

Is there a documented rationale why the House Ways and Means chairman can demand tax info?



PAM tweaks to enable login with blank password from console on CentOS 7.6.1810



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
2019 Community Moderator Election Results
Why I closed the “Why is Kali so hard” questionPAM login permission deniedpam: action on (unsuccessful) loginHowto Tell if a System authenticate with password only or through PAMUnable to login with password as well as otp in pam moduleUsing pam_listfile.so with radius authenticationUse multiple PAM login methods at once?How to local user login(PAM) with MySQL?PAM: Sequences in Linux Login Password Being Flagged UnexpectedlyPAM: Authentication failure, with valid passwordsetting sudo password different from login password



.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








0















I am writing an application that forces the user to change his password after the first login. I set a blank password for this admin user with



passwd -d admin


and verified that no password was set in /etc/shadow



# grep admin /etc/shadow
admin::17834:0:99999:7:::


However, my attempts to login from the console (not ssh) all fail. Can one or more rules in /etc/pam.d/* be tweaked to allow this login? I had once built a debug version of pam and replaced the default library with it (in a custom ISO) to understand which rules were being invoked but it generated humongous amount of log messages.



UPDATE:
I (force-)installed a PAM RPM built with debugging enabled and captured all logs pertinent to a login attempt from the console:



[pam_item.c:pam_set_item(31)] called
[pam_delay.c:_pam_start_timer(42)] starting timer...
[pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(201)] returning userprompt=(null)
[pam_item.c:pam_get_user(281)] called.
[misc_conv.c:misc_conv(279)] allocating empty response structure array.
[misc_conv.c:misc_conv(288)] entering conversation function.
[misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.
[misc_conv.c:read_string(203)] we got some user input
[pam_item.c:pam_set_item(31)] called
[pam_item.c:pam_get_user(380)] completed
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Error in service module
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=3 retval=3
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_item.c:pam_get_user(281)] called.
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
[pam_dispatch.c:_pam_dispatch_aux(100)] skipping substack handler
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=25 retval=25
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
[pam_delay.c:pam_fail_delay(150)] largest = 0
[pam_delay.c:pam_fail_delay(153)] resetting largest delay
[pam_item.c:pam_get_user(281)] called.
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_unix_auth.c:pam_sm_authenticate(112)] called.
[support.c:_set_ctrl(139)] called.
[support.c:_set_ctrl(146)] IAMROOT
[support.c:_set_ctrl(279)] done.
[pam_item.c:pam_get_user(281)] called.
[support.c:_unix_blankpasswd(680)] called
[support.c:_unix_read_password(888)] called
[pam_item.c:pam_get_item(179)] called.
[misc_conv.c:misc_conv(279)] allocating empty response structure array.
[misc_conv.c:misc_conv(288)] entering conversation function.
[misc_conv.c:read_string(136)] called with echo='OFF', prompt='Password: '.
[misc_conv.c:read_string(203)] we got some user input
[pam_item.c:pam_set_item(31)] called
[pam_item.c:pam_get_item(179)] called.
[pam_unix_auth.c:pam_sm_authenticate(175)] user=admin, password=[]
[support.c:_unix_verify_password(730)] called
[support.c:_unix_verify_password(734)] setting delay
[pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
[pam_delay.c:pam_fail_delay(150)] largest = 2000000
[support.c:_unix_verify_password(741)] locating user's record
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
[support.c:_unix_verify_password(755)] running helper binary
[support.c:_unix_run_helper_binary(544)] called.
[passverify.c:verify_pwd_hash(74)] called
[passverify.c:verify_pwd_hash(84)] user has empty password - access denied
[passverify.c:verify_pwd_hash(133)] done [7].
[support.c:_unix_run_helper_binary(662)] returning 7
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(206)] returning tty=tty1
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[support.c:_unix_verify_password(867)] done [7].
[pam_unix_auth.c:pam_sm_authenticate(181)] recording return code for next time [7]
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_unix_auth.c:pam_sm_authenticate(181)] done. [Authentication failure]
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Authentication failure
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-3 cached_retval=7 retval=7
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
[pam_delay.c:pam_fail_delay(150)] largest = 2000000
[pam_item.c:pam_get_user(281)] called.
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_get_data(123)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_data.c:pam_set_data(70)] called
[pam_data.c:_pam_locate_data(46)] called
[pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(206)] returning tty=tty1
[pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
[pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-4 cached_retval=25 retval=25
[pam_item.c:pam_set_item(31)] called
[pam_item.c:pam_set_item(31)] called
[pam_delay.c:_pam_await_timer(90)] waiting?...
[pam_delay.c:_pam_compute_delay(76)] random number: base=2000000 -> ans=1674256

[pam_delay.c:_pam_await_timer(114)] will wait 1674256 usec
[pam_delay.c:_pam_reset_timer(27)] setting pamh->fail_delay.set to FALSE
[pam_delay.c:_pam_await_timer(126)] waiting done
[pam_auth.c:pam_authenticate(39)] pam_authenticate exit
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(196)] returning user=admin
[pam_item.c:pam_set_item(31)] called
[pam_auth.c:pam_authenticate(18)] pam_authenticate called
[pam_item.c:pam_set_item(31)] called
[pam_item.c:pam_set_item(31)] called
[pam_delay.c:_pam_start_timer(42)] starting timer...
[pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
[pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
[pam_item.c:pam_get_item(179)] called.
[pam_item.c:pam_get_item(201)] returning userprompt=(null)
[pam_item.c:pam_get_user(281)] called.
[misc_conv.c:misc_conv(279)] allocating empty response structure array.
[misc_conv.c:misc_conv(288)] entering conversation function.
[misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.


Looking at the source, a check in modules/pam_unix/passverify.c (must be pam_unix.so) is tripping










share|improve this question






























    0















    I am writing an application that forces the user to change his password after the first login. I set a blank password for this admin user with



    passwd -d admin


    and verified that no password was set in /etc/shadow



    # grep admin /etc/shadow
    admin::17834:0:99999:7:::


    However, my attempts to login from the console (not ssh) all fail. Can one or more rules in /etc/pam.d/* be tweaked to allow this login? I had once built a debug version of pam and replaced the default library with it (in a custom ISO) to understand which rules were being invoked but it generated humongous amount of log messages.



    UPDATE:
    I (force-)installed a PAM RPM built with debugging enabled and captured all logs pertinent to a login attempt from the console:



    [pam_item.c:pam_set_item(31)] called
    [pam_delay.c:_pam_start_timer(42)] starting timer...
    [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(201)] returning userprompt=(null)
    [pam_item.c:pam_get_user(281)] called.
    [misc_conv.c:misc_conv(279)] allocating empty response structure array.
    [misc_conv.c:misc_conv(288)] entering conversation function.
    [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.
    [misc_conv.c:read_string(203)] we got some user input
    [pam_item.c:pam_set_item(31)] called
    [pam_item.c:pam_get_user(380)] completed
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Error in service module
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=3 retval=3
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_item.c:pam_get_user(281)] called.
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
    [pam_dispatch.c:_pam_dispatch_aux(100)] skipping substack handler
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=25 retval=25
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
    [pam_delay.c:pam_fail_delay(150)] largest = 0
    [pam_delay.c:pam_fail_delay(153)] resetting largest delay
    [pam_item.c:pam_get_user(281)] called.
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_unix_auth.c:pam_sm_authenticate(112)] called.
    [support.c:_set_ctrl(139)] called.
    [support.c:_set_ctrl(146)] IAMROOT
    [support.c:_set_ctrl(279)] done.
    [pam_item.c:pam_get_user(281)] called.
    [support.c:_unix_blankpasswd(680)] called
    [support.c:_unix_read_password(888)] called
    [pam_item.c:pam_get_item(179)] called.
    [misc_conv.c:misc_conv(279)] allocating empty response structure array.
    [misc_conv.c:misc_conv(288)] entering conversation function.
    [misc_conv.c:read_string(136)] called with echo='OFF', prompt='Password: '.
    [misc_conv.c:read_string(203)] we got some user input
    [pam_item.c:pam_set_item(31)] called
    [pam_item.c:pam_get_item(179)] called.
    [pam_unix_auth.c:pam_sm_authenticate(175)] user=admin, password=[]
    [support.c:_unix_verify_password(730)] called
    [support.c:_unix_verify_password(734)] setting delay
    [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
    [pam_delay.c:pam_fail_delay(150)] largest = 2000000
    [support.c:_unix_verify_password(741)] locating user's record
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
    [support.c:_unix_verify_password(755)] running helper binary
    [support.c:_unix_run_helper_binary(544)] called.
    [passverify.c:verify_pwd_hash(74)] called
    [passverify.c:verify_pwd_hash(84)] user has empty password - access denied
    [passverify.c:verify_pwd_hash(133)] done [7].
    [support.c:_unix_run_helper_binary(662)] returning 7
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(206)] returning tty=tty1
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [support.c:_unix_verify_password(867)] done [7].
    [pam_unix_auth.c:pam_sm_authenticate(181)] recording return code for next time [7]
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_unix_auth.c:pam_sm_authenticate(181)] done. [Authentication failure]
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Authentication failure
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-3 cached_retval=7 retval=7
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
    [pam_delay.c:pam_fail_delay(150)] largest = 2000000
    [pam_item.c:pam_get_user(281)] called.
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_get_data(123)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_data.c:pam_set_data(70)] called
    [pam_data.c:_pam_locate_data(46)] called
    [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(206)] returning tty=tty1
    [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
    [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-4 cached_retval=25 retval=25
    [pam_item.c:pam_set_item(31)] called
    [pam_item.c:pam_set_item(31)] called
    [pam_delay.c:_pam_await_timer(90)] waiting?...
    [pam_delay.c:_pam_compute_delay(76)] random number: base=2000000 -> ans=1674256

    [pam_delay.c:_pam_await_timer(114)] will wait 1674256 usec
    [pam_delay.c:_pam_reset_timer(27)] setting pamh->fail_delay.set to FALSE
    [pam_delay.c:_pam_await_timer(126)] waiting done
    [pam_auth.c:pam_authenticate(39)] pam_authenticate exit
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(196)] returning user=admin
    [pam_item.c:pam_set_item(31)] called
    [pam_auth.c:pam_authenticate(18)] pam_authenticate called
    [pam_item.c:pam_set_item(31)] called
    [pam_item.c:pam_set_item(31)] called
    [pam_delay.c:_pam_start_timer(42)] starting timer...
    [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
    [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
    [pam_item.c:pam_get_item(179)] called.
    [pam_item.c:pam_get_item(201)] returning userprompt=(null)
    [pam_item.c:pam_get_user(281)] called.
    [misc_conv.c:misc_conv(279)] allocating empty response structure array.
    [misc_conv.c:misc_conv(288)] entering conversation function.
    [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.


    Looking at the source, a check in modules/pam_unix/passverify.c (must be pam_unix.so) is tripping










    share|improve this question


























      0












      0








      0








      I am writing an application that forces the user to change his password after the first login. I set a blank password for this admin user with



      passwd -d admin


      and verified that no password was set in /etc/shadow



      # grep admin /etc/shadow
      admin::17834:0:99999:7:::


      However, my attempts to login from the console (not ssh) all fail. Can one or more rules in /etc/pam.d/* be tweaked to allow this login? I had once built a debug version of pam and replaced the default library with it (in a custom ISO) to understand which rules were being invoked but it generated humongous amount of log messages.



      UPDATE:
      I (force-)installed a PAM RPM built with debugging enabled and captured all logs pertinent to a login attempt from the console:



      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_start_timer(42)] starting timer...
      [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(201)] returning userprompt=(null)
      [pam_item.c:pam_get_user(281)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.
      [misc_conv.c:read_string(203)] we got some user input
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_get_user(380)] completed
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Error in service module
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=3 retval=3
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
      [pam_dispatch.c:_pam_dispatch_aux(100)] skipping substack handler
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=25 retval=25
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 0
      [pam_delay.c:pam_fail_delay(153)] resetting largest delay
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_unix_auth.c:pam_sm_authenticate(112)] called.
      [support.c:_set_ctrl(139)] called.
      [support.c:_set_ctrl(146)] IAMROOT
      [support.c:_set_ctrl(279)] done.
      [pam_item.c:pam_get_user(281)] called.
      [support.c:_unix_blankpasswd(680)] called
      [support.c:_unix_read_password(888)] called
      [pam_item.c:pam_get_item(179)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='OFF', prompt='Password: '.
      [misc_conv.c:read_string(203)] we got some user input
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_get_item(179)] called.
      [pam_unix_auth.c:pam_sm_authenticate(175)] user=admin, password=[]
      [support.c:_unix_verify_password(730)] called
      [support.c:_unix_verify_password(734)] setting delay
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 2000000
      [support.c:_unix_verify_password(741)] locating user's record
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [support.c:_unix_verify_password(755)] running helper binary
      [support.c:_unix_run_helper_binary(544)] called.
      [passverify.c:verify_pwd_hash(74)] called
      [passverify.c:verify_pwd_hash(84)] user has empty password - access denied
      [passverify.c:verify_pwd_hash(133)] done [7].
      [support.c:_unix_run_helper_binary(662)] returning 7
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(206)] returning tty=tty1
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [support.c:_unix_verify_password(867)] done [7].
      [pam_unix_auth.c:pam_sm_authenticate(181)] recording return code for next time [7]
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_unix_auth.c:pam_sm_authenticate(181)] done. [Authentication failure]
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Authentication failure
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-3 cached_retval=7 retval=7
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 2000000
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(206)] returning tty=tty1
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-4 cached_retval=25 retval=25
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_await_timer(90)] waiting?...
      [pam_delay.c:_pam_compute_delay(76)] random number: base=2000000 -> ans=1674256

      [pam_delay.c:_pam_await_timer(114)] will wait 1674256 usec
      [pam_delay.c:_pam_reset_timer(27)] setting pamh->fail_delay.set to FALSE
      [pam_delay.c:_pam_await_timer(126)] waiting done
      [pam_auth.c:pam_authenticate(39)] pam_authenticate exit
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(196)] returning user=admin
      [pam_item.c:pam_set_item(31)] called
      [pam_auth.c:pam_authenticate(18)] pam_authenticate called
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_start_timer(42)] starting timer...
      [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(201)] returning userprompt=(null)
      [pam_item.c:pam_get_user(281)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.


      Looking at the source, a check in modules/pam_unix/passverify.c (must be pam_unix.so) is tripping










      share|improve this question
















      I am writing an application that forces the user to change his password after the first login. I set a blank password for this admin user with



      passwd -d admin


      and verified that no password was set in /etc/shadow



      # grep admin /etc/shadow
      admin::17834:0:99999:7:::


      However, my attempts to login from the console (not ssh) all fail. Can one or more rules in /etc/pam.d/* be tweaked to allow this login? I had once built a debug version of pam and replaced the default library with it (in a custom ISO) to understand which rules were being invoked but it generated humongous amount of log messages.



      UPDATE:
      I (force-)installed a PAM RPM built with debugging enabled and captured all logs pertinent to a login attempt from the console:



      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_start_timer(42)] starting timer...
      [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(201)] returning userprompt=(null)
      [pam_item.c:pam_get_user(281)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.
      [misc_conv.c:read_string(203)] we got some user input
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_get_user(380)] completed
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Error in service module
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=3 retval=3
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
      [pam_dispatch.c:_pam_dispatch_aux(100)] skipping substack handler
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=0 cached_retval=25 retval=25
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 0
      [pam_delay.c:pam_fail_delay(153)] resetting largest delay
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Success
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-1 cached_retval=0 retval=0
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_unix_auth.c:pam_sm_authenticate(112)] called.
      [support.c:_set_ctrl(139)] called.
      [support.c:_set_ctrl(146)] IAMROOT
      [support.c:_set_ctrl(279)] done.
      [pam_item.c:pam_get_user(281)] called.
      [support.c:_unix_blankpasswd(680)] called
      [support.c:_unix_read_password(888)] called
      [pam_item.c:pam_get_item(179)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='OFF', prompt='Password: '.
      [misc_conv.c:read_string(203)] we got some user input
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_get_item(179)] called.
      [pam_unix_auth.c:pam_sm_authenticate(175)] user=admin, password=[]
      [support.c:_unix_verify_password(730)] called
      [support.c:_unix_verify_password(734)] setting delay
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 2000000
      [support.c:_unix_verify_password(741)] locating user's record
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [support.c:_unix_verify_password(755)] running helper binary
      [support.c:_unix_run_helper_binary(544)] called.
      [passverify.c:verify_pwd_hash(74)] called
      [passverify.c:verify_pwd_hash(84)] user has empty password - access denied
      [passverify.c:verify_pwd_hash(133)] done [7].
      [support.c:_unix_run_helper_binary(662)] returning 7
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(206)] returning tty=tty1
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [support.c:_unix_verify_password(867)] done [7].
      [pam_unix_auth.c:pam_sm_authenticate(181)] recording return code for next time [7]
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_unix_auth.c:pam_sm_authenticate(181)] done. [Authentication failure]
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: Authentication failure
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-3 cached_retval=7 retval=7
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_delay.c:pam_fail_delay(141)] setting delay to 2000000
      [pam_delay.c:pam_fail_delay(150)] largest = 2000000
      [pam_item.c:pam_get_user(281)] called.
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_get_data(123)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_data.c:pam_set_data(70)] called
      [pam_data.c:_pam_locate_data(46)] called
      [pam_modutil_getpwnam.c:pam_modutil_getpwnam(92)] success
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(206)] returning tty=tty1
      [pam_dispatch.c:_pam_dispatch_aux(114)] module returned: The return value should be ignored by PAM dispatch
      [pam_dispatch.c:_pam_dispatch_aux(198)] use_cached_chain=0 action=-4 cached_retval=25 retval=25
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_await_timer(90)] waiting?...
      [pam_delay.c:_pam_compute_delay(76)] random number: base=2000000 -> ans=1674256

      [pam_delay.c:_pam_await_timer(114)] will wait 1674256 usec
      [pam_delay.c:_pam_reset_timer(27)] setting pamh->fail_delay.set to FALSE
      [pam_delay.c:_pam_await_timer(126)] waiting done
      [pam_auth.c:pam_authenticate(39)] pam_authenticate exit
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(196)] returning user=admin
      [pam_item.c:pam_set_item(31)] called
      [pam_auth.c:pam_authenticate(18)] pam_authenticate called
      [pam_item.c:pam_set_item(31)] called
      [pam_item.c:pam_set_item(31)] called
      [pam_delay.c:_pam_start_timer(42)] starting timer...
      [pam_handlers.c:_pam_init_handlers(342)] _pam_init_handlers called
      [pam_dispatch.c:_pam_dispatch_aux(106)] passing control to module...
      [pam_item.c:pam_get_item(179)] called.
      [pam_item.c:pam_get_item(201)] returning userprompt=(null)
      [pam_item.c:pam_get_user(281)] called.
      [misc_conv.c:misc_conv(279)] allocating empty response structure array.
      [misc_conv.c:misc_conv(288)] entering conversation function.
      [misc_conv.c:read_string(136)] called with echo='ON', prompt='lnxserver login: '.


      Looking at the source, a check in modules/pam_unix/passverify.c (must be pam_unix.so) is tripping







      authentication pam






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited 5 hours ago







      linuxfan

















      asked 11 hours ago









      linuxfanlinuxfan

      18913




      18913




















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













          draft saved

          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f512612%2fpam-tweaks-to-enable-login-with-blank-password-from-console-on-centos-7-6-1810%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















          draft saved

          draft discarded
















































          Thanks for contributing an answer to Unix & Linux Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid


          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.

          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f512612%2fpam-tweaks-to-enable-login-with-blank-password-from-console-on-centos-7-6-1810%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          -authentication, pam

          Popular posts from this blog

          Word for a person who has no opinion about whether god existsWord for having a definite opinion while simultaneously withholding judgment?What's the opposite of “newcomer? Is ”veteran" OK?What do you call an “atheist” who might believe in an afterlife?What's a word for someone who wants to voice opinions but not have them challenged?Word for someone who dismisses contrary opinions as irrational?Somone who thinks they are overly special/out of the ordinaryIs there a word, phrase or idiom for “a person who is incapable of thinking about the future”?The belief that a god is human-likeA word for a non-famous person/thing you have heard a lot aboutAdjective for a person who enjoys taking care of their appearance

          What was this official D&D 3.5e Lovecraft-flavored rulebook?What was this set of RPG tools called?As a first-time DM should I let my players play complex character classes and roles?Nymph's Kiss and the RelationshipWhat was the name of this Cleric Prestige Class that shapes metal with its bare hands?Are the 3.5e Dragonlance books third party or official works?What's up with the domain Vile Darkness?What was this 80s book about RPGs?What was the name of this Werewolf band?What book had Rituals to “upgrade” animal companions to keep them viable at higher levels?What was this RPG that had rules for player-owned businesses?

          2017 IndyCar Series Contents Series news Teams and drivers Schedule Season summary Footnotes References External links Navigation menu"INDYCAR: Initial 2018 bodywork concepts unveiled"the original"IndyCar confirms switch to Performance Friction brakes in 2017""AJ Foyt Racing will switch to Chevy"the original"Carlos Munoz, Conor Daly will drive for AJ Foyt Racing""Zach Veach's Indy 500 Debut Confirmed with Foyt""No mass exodus from Honda after Ganassi switch""Ex-F1 driver Sato joins Andretti Autosport for 2017 IndyCar season""IndyCar's Ryan Hunter-Reay, sponsor DHL paired through 2020""hhgregg and Andretti Autosport announce partnership for key races in 2016""INDYCAR: Rossi re-signs with Andretti"the original"McLaren Formula 1 - Fernando Alonso to race at Indy 500 with McLaren, Honda and Andretti Autosport""Shank will finally take part in Indy 500 with Harvey, Andretti | MotorSportsTalk""Andretti adds Jack Harvey to Indy 500 field""Ganassi switches to Honda power for 2017""INDYCAR: Chilton returns to Ganassi"the original"IndyCar silly season: Who's going where in 2017?""INDYCAR: Kanaan, NTT Data return to Ganassi"the original"Kimball to remain at Ganassi for 2017""Coyne confirms Bourdais for 2017 IndyCar season""Davison to sub for Bourdais in Indy 500"the original"Gutierrez confirmed for Detroit IndyCar debut""Gutierrez returns with Coyne for rest of 2017 season""Vautier to drive for Coyne at Texas"the original"INDYCAR: Coyne confirms Jones for 2017"the original"Pippa Mann returns to Coyne for Indy 500""Karam, Dreyer & Reinbold teaming up again for Indianapolis 500""Pigot to return to Ed Carpenter Racing""Hildebrand confirmed as full-time Ed Carpenter driver""Veach to replace injured Hildebrand at Barber"the originalNew Team Harding Racing Enters Chaves for 101st Indianapolis 500"Juncos Racing Announces Entry in 101st Running of the Indianapolis 500 :: Juncos Racing""Juncos confirms Pigot for Indy 500""Saavedra confirmed in Juncos' second 500 entry"the original"Lazier confirms Indy 500 run after son's USF2000 debut"the original"Claman DeMelo to race for RLLR at Sonoma"the original"Rahal signs Servia and ace engineer for 2017""IndyCar: Aleshin returns with Schmidt"the original"Aleshin replaced by Saavedra for Toronto""Jack Harvey will pilot SPM No. 7 car at Watkins Glen, Sonoma""Jay Howard confirmed in Tony Stewart's supported SPM Indy entry""INDYCAR: Newgarden to wave the flag at Penske"the original"Pagenaud opts for No. 1 in 2017"the original"Penske confirms Newgarden for 2017""Montoya to stay with Team Penske in 2017""Target leaving IndyCar after 27 seasons with Chip Ganassi""Cavin: IndyCar could see complete driver/team shakeup in 2017""End of the road for KV Racing?""KV Racing confirms closure, equipment sold to Juncos""Juncos confirms IndyCar Series entry"the original"Juncos readies IndyCar program, aims for '17 500"the original"Harding Racing to add Texas, Pocono to schedule"the original"Sato signs with Andretti Autosport for 2017""INDYCAR: Aleshin in Doubt at SPM"the original"Long Beach notebook: JR Hildebrand breaks hand""Hildebrand cleared to return at Phoenix"the original"Bourdais to undergo surgery on multiple fractures""Aleshin loses Schmidt Peterson IndyCar ride""Saavedra in at SPM for Pocono, Gateway"the original"Bourdais to make return at Gateway"the original"The IndyCar Grand Prix no longer is sponsored by Angie's List""2017 IndyCar Series rulebook""2017 Verizon IndyCar Series Official Rulebook"Official websiteeeeee