pam_userdb change to use GDBM release note is incomplete
Issue #39 (closed) creates a sys admin guide for pam_userdb
, which notes that only a database conversion has to be done.
This is incomplete: traditionally a pam_userdb db=<database>
is specified without the filename extension, and the pam_userdb man page in Fedora 40 explicitly states this (bold mine):
db=/path/database Use the /path/database database for performing lookup. There is no default; the module will return PAM_IGNORE if no database is provided. Note that the path to the database file should be specified without the .db suffix.
However, after converting to gdbm, authentication no longer works in Fedora 40 unless the database is updated in the pam_userdb configuration to include the ".gdbm" suffix.