[gentoo-user] PAM issues

[gentoo-user] PAM issues

[Alexander Skwar]

Hi!

Today I updated pam:

[ebuild   R   ] sys-libs/pam-0.99.6.3-r1  USE="nls (-selinux) -vim-syntax" 0 kB

Since then, I get the following errors in syslog:

==> ./cron.log <==
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_unix.so)
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
time reference]
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_unix.so
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_limits.so)
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
time reference]
Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_limits.so
Nov 13 14:56:01 dewup-ww02 cron[5467]: Module is unknown
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_unix.so)
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
time reference]
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_unix.so
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_limits.so)
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
time reference]
Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_limits.so
Nov 13 14:56:01 dewup-ww02 cron[5469]: Module is unknown

sudo also doesn't work anymore.

Anyone else experiencing these problems?

FWIW: I reported this also as a bug. See <http://bugs.gentoo.org/show_bug.cgi?id=155014>.

Cheers,
Alexander Skwar
-- 
I tell ya, I was an ugly kid.  I was so ugly that my dad kept the kid's
picture that came with the wallet he bought.
		-- Rodney Dangerfield
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] PAM issues

[Lorenzo Marussi]

[-- Attachment #1: Type: text/plain, Size: 2332 bytes --]

try to make:

    revdep-rebuild -p -i

and post the output.

Lorenzo Marussi

Il giorno lun, 13/11/2006 alle 15.12 +0100, Alexander Skwar ha scritto:

> Hi!
> 
> Today I updated pam:
> 
> [ebuild   R   ] sys-libs/pam-0.99.6.3-r1  USE="nls (-selinux) -vim-syntax" 0 kB
> 
> Since then, I get the following errors in syslog:
> 
> ==> ./cron.log <==
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_unix.so)
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> time reference]
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_unix.so
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_limits.so)
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> time reference]
> Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_limits.so
> Nov 13 14:56:01 dewup-ww02 cron[5467]: Module is unknown
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_unix.so)
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> time reference]
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_unix.so
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_limits.so)
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> time reference]
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_limits.so
> Nov 13 14:56:01 dewup-ww02 cron[5469]: Module is unknown
> 
> sudo also doesn't work anymore.
> 
> Anyone else experiencing these problems?
> 
> FWIW: I reported this also as a bug. See <http://bugs.gentoo.org/show_bug.cgi?id=155014>.
> 
> Cheers,
> Alexander Skwar
> -- 
> I tell ya, I was an ugly kid.  I was so ugly that my dad kept the kid's
> picture that came with the wallet he bought.
> 		-- Rodney Dangerfield

[-- Attachment #2: Type: text/html, Size: 3587 bytes --]

Re: [gentoo-user] PAM issues

[Lorenzo Marussi]

[-- Attachment #1.1: Type: text/plain, Size: 4111 bytes --]

I didn't see:
I reported this also as a bug. See
<http://bugs.gentoo.org/show_bug.cgi?id=155014>.

Sorry

Lorenzo Marussi


Il giorno lun, 13/11/2006 alle 19.15 +0100, Lorenzo Marussi ha scritto:

> try to make:
> 
>     revdep-rebuild -p -i
> 
> and post the output.
> 
> Lorenzo Marussi
> 
> Il giorno lun, 13/11/2006 alle 15.12 +0100, Alexander Skwar ha
> scritto: 
> 
> > Hi!
> > 
> > Today I updated pam:
> > 
> > [ebuild   R   ] sys-libs/pam-0.99.6.3-r1  USE="nls (-selinux) -vim-syntax" 0 kB
> > 
> > Since then, I get the following errors in syslog:
> > 
> > ==> ./cron.log <==
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_unix.so)
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> > time reference]
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_unix.so
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM unable to dlopen(/lib/security/pam_limits.so)
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> > time reference]
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: PAM adding faulty module: /lib/security/pam_limits.so
> > Nov 13 14:56:01 dewup-ww02 cron[5467]: Module is unknown
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_unix.so)
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_unix.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> > time reference]
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_unix.so
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM unable to dlopen(/lib/security/pam_limits.so)
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_limits.so: symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file libpam.so.0 with link 
> > time reference]
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module: /lib/security/pam_limits.so
> > Nov 13 14:56:01 dewup-ww02 cron[5469]: Module is unknown
> > 
> > sudo also doesn't work anymore.
> > 
> > Anyone else experiencing these problems?
> > 
> > FWIW: I reported this also as a bug. See <http://bugs.gentoo.org/show_bug.cgi?id=155014>.
> > 
> > Cheers,
> > Alexander Skwar
> > -- 
> > I tell ya, I was an ugly kid.  I was so ugly that my dad kept the kid's
> > picture that came with the wallet he bought.
> > 		-- Rodney Dangerfield




--

Marussi Lorenzo


Asssistenza tecnica e sviluppo
sistemi di storage e server linux.


Email: lorenzo@auroracomputers.it
--
Questo messaggio potrebbe contenere informazioni confidenziali e
proprietarie ed e’ destinato esclusivamente alla persona o ente al quale
è stato indirizzato; il contenuto potrebbe contenere opinioni personali
le quali non costituiscono impegni o posizioni ufficiali se non
esplicitamente indicato. Nel rispetto della legge sulla privacy 675/96 e
successivo DGLS 196 del 30/06/03 è stato fatto tutto il possibile per
limitare la distribuzione di questo messaggio ad una lista di persone
che possono trovare la proposta interessante. Il presente messaggio è
stato inviato esclusivamente alle e-mail degli utenti di internet che
hanno voluto ricevere tale messaggio lasciando proprio indirizzo e
generalità su nostro database. Qualora riceviate il presente messaggio
per errore, vi preghiamo di voler cortesemente darcene notizia via
e-mail. I dati in esso contenuti sono trattati nel rispetto della legge
stessa. Il titolare del trattamento e’ AURORA COMPUTERS SRL Via Aquileia
70 34072 Gradisca GO , l’ informativa completa e’ possibile reperirla su
www.auroracomputers.it e/o www.aurorashop.it . Qualora non desideriate
ricevere in futuro comunicazioni dalla ditta scrivente, potete opporVi
inviando un messaggio a info@auroracomputers.it 

[-- Attachment #1.2: Type: text/html, Size: 6422 bytes --]

[-- Attachment #2: linea_footer.jpg --]
[-- Type: image/jpeg, Size: 509 bytes --]

[-- Attachment #3: a.jpg --]
[-- Type: image/jpeg, Size: 9106 bytes --]

[gentoo-user] Re: PAM issues

[Alexander Skwar]

· Lorenzo Marussi <lorenzo@auroracomputers.it>:

> try to make:
> 
>     revdep-rebuild -p -i
> 
> and post the output.

Uhm. This might have returned something nice, I suppose ;)

Instead, I rebuilt vixie-cron, which helped as well.

Alexander Skwar
-- 
Concerning the war in Vietnam, Senator George Aiken of Vermount noted
in January, 1966, "I'm not very keen for doves or hawks.  I think we need
more owls."
                -- Bill Adler, "The Washington Wits"


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: PAM issues

[Alexander Skwar]

Alexander Skwar <listen@alexander.skwar.name>:

> Instead, I rebuilt vixie-cron, which helped as well.

Hm. I'm now having issues with SSH and sudo as well :(

When I try to login with SSH, I find the following in syslog:

Nov 14 13:00:30 dewup-ww02 sshd[25175]: error: PAM: Authentication failure for vz6tml from localhost

When I do sudo, I get:

Nov 14 13:01:50 dewup-ww02 sudo: pam_unix(sudo:auth): authentication failure; logname=vz6tml uid=0 euid=0 tty=pts/40 ruser= rhost=  user=vz6tml

/etc/pam.d/sudo is the default file; ie:

# File autogenerated by pamd_mimic_system in pam eclass


auth    include         system-auth
account include         system-auth
password        include         system-auth
session include         system-auth

/etc/pam.d/sshd is also default:

#%PAM-1.0

auth       include      system-auth
auth       required     pam_shells.so
auth       required     pam_nologin.so
account    include      system-auth
password   include      system-auth
session    include      system-auth

And /etc/pam.d/system-auth is also default:

#%PAM-1.0

auth       required     pam_env.so
auth       sufficient   pam_unix.so try_first_pass likeauth nullok
auth       required     pam_deny.so

account    required     pam_unix.so

password   required     pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3
password   sufficient   pam_unix.so try_first_pass use_authtok nullok md5 shadow
password   required     pam_deny.so

session    required     pam_limits.so
session    required     pam_unix.so

Even after rebuilding openssh (4.5_p1) and sudo (1.6.8_p12-r1), I still
cannot use those applications.

Alexander Skwar
-- 
Oblivion together does not frighten me, beloved.
                -- Thalassa (in Anne Mulhall's body), "Return to Tomorrow",
                   stardate 4770.3.


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: PAM issues

[Alan McKinnon]

On Tuesday 14 November 2006 14:04, Alexander Skwar wrote:
> Alexander Skwar <listen@alexander.skwar.name>:
> > Instead, I rebuilt vixie-cron, which helped as well.
>
> Hm. I'm now having issues with SSH and sudo as well :(
>
> When I try to login with SSH, I find the following in syslog:
>
> Nov 14 13:00:30 dewup-ww02 sshd[25175]: error: PAM: Authentication
> failure for vz6tml from localhost
>
> When I do sudo, I get:
>
> Nov 14 13:01:50 dewup-ww02 sudo: pam_unix(sudo:auth): authentication
> failure; logname=vz6tml uid=0 euid=0 tty=pts/40 ruser= rhost= 
> user=vz6tml
>
> /etc/pam.d/sudo is the default file; ie:

[snip pam file contents]

I have exactly the same package versions as you and my files are 
identical to yours, and it works my end. So you don't have a config 
issue.

> Even after rebuilding openssh (4.5_p1) and sudo (1.6.8_p12-r1), I
> still cannot use those applications.

Do they have the pam USE flag set? Here's my settings for those apps:

nazgul ~ # eix openssh
[I] net-misc/openssh
     Available versions:  3.9_p1-r3 (~)4.0_p1-r2 (~)4.1_p1-r1 4.2_p1-r1 
4.3_p2-r1 4.3_p2-r5 4.4_p1-r6 (~)4.5_p1
     Installed:           4.5_p1(09:36:16 11/09/06)(X -X509 chroot 
hpn -kerberos -ldap -libedit pam -selinux -skey -smartcard -static 
tcpd)

nazgul ~ # eix sudo
[I] app-admin/sudo
     Available versions:  1.6.8_p9 1.6.8_p9-r2 (~)1.6.8_p11 (~)1.6.8_p12 
(~)1.6.8_p12-r1
     Installed:           1.6.8_p12-r1(13:59:46 09/21/06)(-ldap 
offensive pam -selinux -skey)

nazgul ~ # eix ^pam$
[I] sys-libs/pam
     Available versions:  0.78-r3 (~)0.78-r5 (~)0.99.6.3-r1
     Installed:           0.99.6.3-r1(20:48:18 11/13/06)(-elibc_FreeBSD 
nls -selinux -vim-syntax)


Any clues from revdep-rebuild?
I take it you did log out and in again, I find that pam updates often 
require that or even a reboot (dunno why, it just seems to work like 
that for me)


alan
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: PAM issues

[Alexander Skwar]

Alan McKinnon <alan@linuxholdings.co.za>:

> On Tuesday 14 November 2006 14:04, Alexander Skwar wrote:
>> Alexander Skwar <listen@alexander.skwar.name>:
>> > Instead, I rebuilt vixie-cron, which helped as well.
>>
>> Hm. I'm now having issues with SSH and sudo as well :(
>>
>> When I try to login with SSH, I find the following in syslog:
>>
>> Nov 14 13:00:30 dewup-ww02 sshd[25175]: error: PAM: Authentication
>> failure for vz6tml from localhost
>>
>> When I do sudo, I get:
>>
>> Nov 14 13:01:50 dewup-ww02 sudo: pam_unix(sudo:auth): authentication
>> failure; logname=vz6tml uid=0 euid=0 tty=pts/40 ruser= rhost= 
>> user=vz6tml
>>
>> /etc/pam.d/sudo is the default file; ie:
> 
> [snip pam file contents]
> 
> I have exactly the same package versions as you and my files are 
> identical to yours, and it works my end. So you don't have a config 
> issue.

Thanks for confirming this.

>> Even after rebuilding openssh (4.5_p1) and sudo (1.6.8_p12-r1), I
>> still cannot use those applications.
> 
> Do they have the pam USE flag set?

Yes, they do.

[ebuild   R   ] app-admin/sudo-1.6.8_p12-r1  USE="-ldap offensive pam (-selinux) -skey" 0 kB
[ebuild   R   ] net-misc/openssh-4.5_p1  USE="-X -X509 -chroot hpn -kerberos -ldap libedit pam (-selinux) -skey -smartcard -static tcpd" 0 k

> Any clues from revdep-rebuild?
> I take it you did log out and in again,

Yes.

Reboot: No. 

Alexander Skwar
-- 
 "Who would have though hell would really exist? And that it would be in New
Jersey?" -Leela 
"Actually..." - Fry


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: PAM issues

[Alan McKinnon]

On Tuesday 14 November 2006 15:23, Alexander Skwar wrote:
> > Any clues from revdep-rebuild?
> > I take it you did log out and in again,
>
> Yes.
>
> Reboot: No.

That's worth a try. I know it goes against the grain but at this stage 
what do you have to lose? At least you are guaranteed that every unlink 
really is unlinked. It might just be similar to the weird thing I have 
with every kdelibs update (I use e17 with konsole and konqueror, every 
update changes the on-screen font sizes till I reboot - which always 
fixes it. Yeah, go figure :-)

alan

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Re: PAM issues

[Alexander Skwar]

· Alan McKinnon <alan@linuxholdings.co.za>:

> On Tuesday 14 November 2006 15:23, Alexander Skwar wrote:
>> > Any clues from revdep-rebuild?
>> > I take it you did log out and in again,
>>
>> Yes.
>>
>> Reboot: No.
> 
> That's worth a try. I know it goes against the grain but at this stage 
> what do you have to lose?

Rebooting is hard. That's a server, after all. And right now, I downgraded
to Pam 78.

> At least you are guaranteed that every unlink  
> really is unlinked. 

Hm. But why should this do something? I mean, I re-compiled
PAM and sudo now several times. 

Alexander Skwar
-- 
Only someone with nothing to be sorry for smiles back at the rear of an
elephant.


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Re: PAM issues

[Lorenzo Marussi]

[-- Attachment #1: Type: text/plain, Size: 941 bytes --]

but, with pam-0.99.6.3-r1, have you tried to make a "revdep-rebuild -p
-i" ?

Lorenzo Marussi


Il giorno mar, 14/11/2006 alle 17.40 +0100, Alexander Skwar ha scritto:

> · Alan McKinnon <alan@linuxholdings.co.za>:
> 
> > On Tuesday 14 November 2006 15:23, Alexander Skwar wrote:
> >> > Any clues from revdep-rebuild?
> >> > I take it you did log out and in again,
> >>
> >> Yes.
> >>
> >> Reboot: No.
> > 
> > That's worth a try. I know it goes against the grain but at this stage 
> > what do you have to lose?
> 
> Rebooting is hard. That's a server, after all. And right now, I downgraded
> to Pam 78.
> 
> > At least you are guaranteed that every unlink  
> > really is unlinked. 
> 
> Hm. But why should this do something? I mean, I re-compiled
> PAM and sudo now several times. 
> 
> Alexander Skwar
> -- 
> Only someone with nothing to be sorry for smiles back at the rear of an
> elephant.
> 
> 

[-- Attachment #2: Type: text/html, Size: 1892 bytes --]

[gentoo-user] Re: Re: Re: PAM issues

[Alexander Skwar]

· Lorenzo Marussi <lorenzo@auroracomputers.it>:

> but, with pam-0.99.6.3-r1, have you tried to make a "revdep-rebuild -p
> -i" ?

Oh, right, no, I have not, but I'll do so tomorrow morning. Thanks
for reminding me again!

Alexander Skwar
-- 
"Never laugh at live dragons, Bilbo you fool!" he said to himself, and it became
a favourite saying of his later, and passed into a proverb. "You aren't nearly
through this adventure yet," he added, and that was pretty true as well.
-- Bilbo Baggins, "The Hobbit" by J.R.R. Tolkien, Chapter XII


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: PAM issues

[Alexander Skwar]

Alexander Skwar <listen@alexander.skwar.name>:

> · Lorenzo Marussi <lorenzo@auroracomputers.it>:
> 
>> but, with pam-0.99.6.3-r1, have you tried to make a "revdep-rebuild -p
>> -i" ?
> 
> Oh, right, no, I have not, but I'll do so tomorrow morning. Thanks
> for reminding me again!

It wants to rebuild dev-java/blackdown-jdk-1.4.2.03-r12

:)

But it was of course worth a try!

Alexander Skwar
-- 
Fortune finishes the great quotations, #2

        If at first you don't succeed, think how many people
        you've made happy.


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] PAM issues

[Alan McKinnon]

On Monday 13 November 2006 16:12, Alexander Skwar wrote:
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module:
> /lib/security/pam_unix.so Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM
> unable to dlopen(/lib/security/pam_limits.so) Nov 13 14:56:01
> dewup-ww02 cron[5469]: PAM [dlerror: /lib/security/pam_limits.so:
> symbol pam_syslog, version LIBPAM_EXTENSION_1.0 not defined in file
> libpam.so.0 with link time reference]
> Nov 13 14:56:01 dewup-ww02 cron[5469]: PAM adding faulty module:
> /lib/security/pam_limits.so Nov 13 14:56:01 dewup-ww02 cron[5469]:
> Module is unknown
>
> sudo also doesn't work anymore.
>
> Anyone else experiencing these problems?

Yes, I ran into this when my e17 session's screensaver kicked in and it 
wanted a password. I could start a new X server and it would work 
properly, new console sessions on a vt worked fine, but the open one 
wouldn't authenticate me.

Closing that session and starting a new was all I could do, so I have to 
assume the upgrade from pam-0.78-r5 to 0.99.6.3-r1 unlinked some pam 
stuff that the running entrance was still wanting to use. Strange that, 
I was under the impression that files are only fully unlinked once the 
last running process using it releases it.

alan
-- 
gentoo-user@gentoo.org mailing list