{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/20206","labels_url":"https://api.github.com/repos/saltstack/salt/issues/20206/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/20206/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/20206/events","html_url":"https://github.com/saltstack/salt/issues/20206","id":55939483,"number":20206,"title":"Salt ui external_auth  for local user","user":{"login":"subhashchand","id":10760179,"avatar_url":"https://avatars.githubusercontent.com/u/10760179?v=3","gravatar_id":"","url":"https://api.github.com/users/subhashchand","html_url":"https://github.com/subhashchand","followers_url":"https://api.github.com/users/subhashchand/followers","following_url":"https://api.github.com/users/subhashchand/following{/other_user}","gists_url":"https://api.github.com/users/subhashchand/gists{/gist_id}","starred_url":"https://api.github.com/users/subhashchand/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/subhashchand/subscriptions","organizations_url":"https://api.github.com/users/subhashchand/orgs","repos_url":"https://api.github.com/users/subhashchand/repos","events_url":"https://api.github.com/users/subhashchand/events{/privacy}","received_events_url":"https://api.github.com/users/subhashchand/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/saltstack/salt/labels/Pending%20Discussion","name":"Pending Discussion","color":"c7def8"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/saltstack/salt/milestones/13","html_url":"https://github.com/saltstack/salt/milestones/Approved","labels_url":"https://api.github.com/repos/saltstack/salt/milestones/13/labels","id":9265,"number":13,"title":"Approved","description":"All issues that are ready to be worked on, both bugs and features.","creator":{"login":"thatch45","id":507599,"avatar_url":"https://avatars.githubusercontent.com/u/507599?v=3","gravatar_id":"","url":"https://api.github.com/users/thatch45","html_url":"https://github.com/thatch45","followers_url":"https://api.github.com/users/thatch45/followers","following_url":"https://api.github.com/users/thatch45/following{/other_user}","gists_url":"https://api.github.com/users/thatch45/gists{/gist_id}","starred_url":"https://api.github.com/users/thatch45/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thatch45/subscriptions","organizations_url":"https://api.github.com/users/thatch45/orgs","repos_url":"https://api.github.com/users/thatch45/repos","events_url":"https://api.github.com/users/thatch45/events{/privacy}","received_events_url":"https://api.github.com/users/thatch45/received_events","type":"User","site_admin":false},"open_issues":2420,"closed_issues":2279,"state":"open","created_at":"2011-05-14T04:00:56Z","updated_at":"2015-07-13T23:54:06Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2015-01-29T18:46:03Z","updated_at":"2015-07-14T09:10:38Z","closed_at":null,"body":"please suggest me how to set salt ui  external_auth  for local user \r\nmy file \r\n\r\n```\r\nexternal_auth:\r\n  pam:\r\n     testuser:\r\n      - .*\r\n      - '@runner'\r\n      - '@wheel'\r\n```\r\n\r\nwhen i execute this command \r\n\r\n```\r\nsalt -a pam '*' test.ping\r\n```\r\n\r\ngetting this error:\r\n\r\n```\r\nFailed to authenticate!  This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error occurred (check disk/inode usage)\r\n```\r\n\r\nsuggest me  plz"},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/121174317","html_url":"https://github.com/saltstack/salt/issues/20206#issuecomment-121174317","issue_url":"https://api.github.com/repos/saltstack/salt/issues/20206","id":121174317,"user":{"login":"andrejohansson","id":2828428,"avatar_url":"https://avatars.githubusercontent.com/u/2828428?v=3","gravatar_id":"","url":"https://api.github.com/users/andrejohansson","html_url":"https://github.com/andrejohansson","followers_url":"https://api.github.com/users/andrejohansson/followers","following_url":"https://api.github.com/users/andrejohansson/following{/other_user}","gists_url":"https://api.github.com/users/andrejohansson/gists{/gist_id}","starred_url":"https://api.github.com/users/andrejohansson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrejohansson/subscriptions","organizations_url":"https://api.github.com/users/andrejohansson/orgs","repos_url":"https://api.github.com/users/andrejohansson/repos","events_url":"https://api.github.com/users/andrejohansson/events{/privacy}","received_events_url":"https://api.github.com/users/andrejohansson/received_events","type":"User","site_admin":false},"created_at":"2015-07-14T09:10:38Z","updated_at":"2015-07-14T09:10:38Z","body":"I have this as well, on a clean ubuntu 14.04 lts image. I add the user `saltapiuser` with the command `adduser saltapiuser`. I have the following section in my `/etc/salt/master` config file:\r\n\r\n```\r\nexternal_auth:\r\n  pam:\r\n    andre:\r\n      - .*\r\n      - '@wheel'\r\n      - '@runner'\r\n    saltapiuser:\r\n      - .*\r\n      - '@wheel'\r\n      - '@runner'\r\n```\r\n\r\nThen I restart the salt-master using `service salt-master restart` and finally I login as `saltapiuser` with ssh and run the command `salt \"*\" test.ping` and I still get\r\n```\r\nsaltapiuser@dvs-eu-sama:~$ salt '*' test.ping\r\nFailed to authenticate! This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error occurred (check disk/inode usage).\r\n```\r\nIt feels that there is some step missing regarding the `saltapiuser`. Should I add the user to some specific group or should I add some permissions to specific files?\r\n\r\nI made both the `/var/log/salt/master` and `/var/log/salt/minion` log files publicly accessible (`chmod 777`) but that still didn't help.\r\n\r\nThe salt-master service runns as `root` (default, no changes)."}}