Instead of logging me in, PAM greets me with the message Cannot make/remove an entry for the specified session after I enter the password. What entry is it talking about (and what session)?The string with the error message is found in libpam.so.0(.83.1).My system is based on binaries from Fedora release 20 (Heisenburg).How can I troubleshoot PAM to figure out what is needed to successfully login?I have no syslog (and no persistent disk, only an initramfs).Updates:SELinux is Disabled.I am more than willing to replace the entire PAM config with something simple that allows login (normal user and root) on the virtual consoles only.Source code from Linux-PAM-1.1.8, libpam/pam_strerror.c reveals that the message comes from the error code PAM_SESSION_ERR, which can be caused by all sorts of internal problems, such as memory allocation error or failure to locate the users home directory. So much for trying to interpret the error message. :-(Below are my config files based on the comment indicating /etc/pam.d/login as a starting point:(I have also tried removing all lines containing pam_loginuid.so without any noticeable difference)/etc/pam.d/login:auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.soauth       substack     system-authauth       include      postloginaccount    required     pam_nologin.soaccount    include      system-authpassword   include      system-authsession    required     pam_selinux.so closesession    required     pam_loginuid.sosession    optional     pam_console.sosession    required     pam_selinux.so opensession    required     pam_namespace.sosession    optional     pam_keyinit.so force revokesession    include      system-authsession    include      postlogin-session   optional     pam_ck_connector.so/etc/pam.d/postlogin:session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quietsession     [default=1]   pam_lastlog.so nowtmp showfailedsession     optional      pam_lastlog.so silent noupdate showfailed/etc/pam.d/system-auth:auth        required      pam_env.soauth        sufficient    pam_fprintd.soauth        sufficient    pam_unix.so nullok try_first_passauth        requisite     pam_succeed_if.so uid >= 1000 quiet_successauth        required      pam_deny.soaccount     required      pam_unix.soaccount     sufficient    pam_localuser.soaccount     sufficient    pam_succeed_if.so uid < 1000 quietaccount     required      pam_permit.sopassword    requisite     pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtokpassword    required      pam_deny.sosession     optional      pam_keyinit.so revokesession     required      pam_limits.so-session     optional      pam_systemd.sosession     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uidsession     required      pam_unix.soI have these shared PAM-related libraries:libpam_misc.so.0libpam.so.0pam_access.sopam_console.sopam_deny.sopam_env.sopam_fprintd.sopam_gnome_keyring.sopam_keyinit.sopam_lastlog.sopam_limits.sopam_localuser.sopam_loginuid.sopam_namespace.sopam_nologin.sopam_permit.sopam_pkcs11.sopam_pwquality.sopam_rootok.sopam_securetty.sopam_selinux_permit.sopam_selinux.sopam_sepermit.sopam_succeed_if.sopam_systemd.sopam_timestamp.sopam_unix_acct.sopam_unix_auth.sopam_unix.sopam_xauth.soas well as these that are referenced by the above shared libraries (according to ldd):libattr.so.1libaudit.so.1libcap.so.2libcrack.so.2libcrypt.so.1libc.so.6libdbus-1.so.3libdbus-glib-1.so.2libdl.so.2libffi.so.6libfreebl3.solibgcc_s.so.1libgio-2.0.so.0libglib-2.0.so.0libgmodule-2.0.so.0libgobject-2.0.so.0liblzma.so.5libnsl.so.1libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libpcre.so.3libplc4.solibplds4.solibpthread.so.0libpwquality.so.1libresolv.so.2librt.so.1libselinux.so.1libsmime3.solibssl3.solibutil.so.1libz.so.1
What does Cannot make/remove an entry for the specified session mean?
login;pam;debugging