What problem does it solve? Chrome Remote Desktop reports several unrelated Linux host failures through one misleading message, so a "PIN is not valid" error, an instantly dropped session, or a failed registration sends administrators down expensive wrong turns like re-registering the host and burning single-use OAuth codes. This Skill maps each symptom to its real cause and gives the verified repair path. ## Core Features & Use Cases - Symptom-to-cause diagnosis: Reads the host journal during a connection attempt to distinguish PAM account-check failures, dead services, and registration problems before any destructive action. - PAM and /etc/shadow repair: Fixes the root:shadow group ownership that breaks unix_chkpwd, then verifies with a pamtester positive/negative control pair run as the unprivileged user, never as root. - Registration discipline: Runs start-host as the target user with a trap-cleaned temporary sudoers grant, checks every precondition before spending a single-use OAuth code, and archives half-written configs instead of stacking new ones. - Use Case: A user reports "PIN is not valid" on a freshly imaged LXC container. The Skill guides you to the journal, identifies pam_acct_mgmt error 7, corrects /etc/shadow ownership to root:shadow 0640, and confirms the fix with pamtester - all without consuming an OAuth code. ## Quick Start Diagnose why my Chrome Remote Desktop host on this Linux VM says "PIN is not valid" even though the PIN is correct, and fix it without re-registering the host.
