[gentoo-user] pam upgrade issue

[gentoo-user] pam upgrade issue

[maxim wexler]

Hi group,

Now emerge -uD world barfs at pam-0.99 and directs me
to 

http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml

Here, among other things, it says to edit certain
files, but it doesn't say which ones? Unless it means
all of the ones under /etc/pam.d/ I checked several of
them and none mentions pam_stack.so

It mentions two new packages pam_userdb and
pam_chroot. 
Doesn't say to emerge them but I tried nonetheless.
Attempts to emerge them fail with the same notice for
both of them:


 * Your current setup is using the pam_stack module.
 * This module is deprecated and no longer supported,
and since version
 * 0.99 is no longer installed, nor provided by any
other package.
 * The package will be built (to allow binary package
builds), but will
 * not be installed.
 * Please replace pam_stack usage with proper include
directive usage,
 * following the PAM Upgrade guide at the following
URL
 *  
http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml
 *

I took a chance and unmerged the deprecated pam and
now I can't su and probably other stuff I don't know
about yet.



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam upgrade issue

[Dan Farrell]

On Tue, 29 Jan 2008 16:32:19 -0800 (PST)
maxim wexler <blissfix@yahoo.com> wrote:

> Hi group,
> 
> Now emerge -uD world barfs at pam-0.99 and directs me
> to 
> 
> http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml
> 
> Here, among other things, it says to edit certain
> files, but it doesn't say which ones? Unless it means
> all of the ones under /etc/pam.d/ I checked several of
> them and none mentions pam_stack.so
> 
> It mentions two new packages pam_userdb and
> pam_chroot. 
> Doesn't say to emerge them but I tried nonetheless.
> Attempts to emerge them fail with the same notice for
> both of them:
> 
> 
>  * Your current setup is using the pam_stack module.
>  * This module is deprecated and no longer supported,
> and since version
>  * 0.99 is no longer installed, nor provided by any
> other package.
>  * The package will be built (to allow binary package
> builds), but will
>  * not be installed.
>  * Please replace pam_stack usage with proper include
> directive usage,
>  * following the PAM Upgrade guide at the following
> URL
>  *  
> http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml
>  *
> 
> I took a chance and unmerged the deprecated pam and
> now I can't su and probably other stuff I don't know
> about yet.
> 

Leave all your root consoles open.  You won't be able to log in
until you fix PAM.  From your source:

"All the changes described have to be applied to each file in
the /etc/pam.d/ directory (the PAM configuration files). Please make
sure you remove eventual backup files (*~) before trying to update
sys-libs/pam, or the emerge process will fail as a safety measure.

As a safety device, the sys-libs/pam ebuild checks the files present
in /etc/pam.d/ for the now-deprecated modules, and stops the merge
process in case they are still used, to avoid locking you out of your
own system. "

All files in /etc/pam.d must be updated; if you unmerged PAM might
well have been the only version available: 
 
>  * The package will be built (to allow binary package
> builds), but will not be installed. 

Update the config files (as necessary - and remove backup copies) and
then remerge the package.  
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam upgrade issue

[Hal Martin]

maxim wexler wrote:
> Hi group,
>
> Now emerge -uD world barfs at pam-0.99 and directs me
> to 
>
> http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml
>   
Yeah, that guide is useless. I'm assuming that you're trying to update
PAM from 0.99.8.1-r1 to 0.99.9.0?
> Here, among other things, it says to edit certain
> files, but it doesn't say which ones? Unless it means
> all of the ones under /etc/pam.d/ I checked several of
> them and none mentions pam_stack.so
>
> It mentions two new packages pam_userdb and
> pam_chroot. 
>   
'cd /etc/pam.d/'
'grep pam_chroot *'
'grep 'pam_userdb *'

If that doesn't come up with anything, then do this (probably not right,
but it worked for me):

'mv /etc/pam.d /etc/pam.d.0.99.8.1-r1'
'mkdir /etc/pam.d'
'emerge -av pam shadow'
'revdep-rebuild'

And then after that you have to re-emerge all the applications at have
auth files in /etc/pam.d. Probably gonna be (at least) cron, cups, cvs,
login, passwd, shadow (already done...), sshd, sudo, and possibly more.

Speaking of which, if you can't get to root, you're going to have to do
this from a liveCD. Also, I would suggest popping in the Gentoo channel
on Freenode, there are some very helpful people there.
> Doesn't say to emerge them but I tried nonetheless.
> Attempts to emerge them fail with the same notice for
> both of them:
>
>
>  * Your current setup is using the pam_stack module.
>  * This module is deprecated and no longer supported,
> and since version
>  * 0.99 is no longer installed, nor provided by any
> other package.
>  * The package will be built (to allow binary package
> builds), but will
>  * not be installed.
>  * Please replace pam_stack usage with proper include
> directive usage,
>  * following the PAM Upgrade guide at the following
> URL
>  *  
> http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml
>  *
>
> I took a chance and unmerged the deprecated pam and
> now I can't su and probably other stuff I don't know
> about yet.
>   
Yeah, time for a LiveCD.

Probably not the "right" way of doing it, but then again, there is no
firmly documented "right" way since I forgot to take notes! >.<
-Hal
>
>
>       ____________________________________________________________________________________
> Never miss a thing.  Make Yahoo your home page. 
> http://www.yahoo.com/r/hs
>   

-- 
gentoo-user@lists.gentoo.org mailing list