[gentoo-user] pam fixed now it's tcpdump

[gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

Hi group,

The gentoo pam-0.99 update guide says something like
"it's safe to remove /etc/pam.d/*". It should say "you
_must_ remove /etc/pam.d/*". So that hurdle was
cleared

emerge -uD world continued then this:
<...>
groupadd: PAM authentication failed
 *
 * ERROR: net-analyzer/tcpdump-3.9.8 failed.
 * Call stack:
 *              ebuild.sh, line 1717:  Called
dyn_preinst
 *              ebuild.sh, line 1156:  Called
pkg_preinst
 *   tcpdump-3.9.8.ebuild, line   67:  Called
enewgroup 'tcpdump'
 *          eutils.eclass, line  707:  Called die
 * The specific snippet of code:
 *              groupadd ${opts} ${egroup} || die
"enewgroup failed"
 *  The die message:
 *   enewgroup failed
 *
 * If you need support, post the topmost build error,
and the call stack if relevant.
 * A complete build log is located at
'/var/log/portage/net-analyzer:tcpdump-3.9.8:20080130-072451.log'.
 *
!!! FAILED preinst: 1

google was not forthcoming. I added
'net-analyzer/tcpdump ~x86' to package.keywords but
that didn't help.

Any ideas?

Maxim




      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Wednesday 30 January 2008, maxim wexler wrote:
>  *
>  * ERROR: net-analyzer/tcpdump-3.9.8 failed.
>  * Call stack:
>  *              ebuild.sh, line 1717:  Called
> dyn_preinst
>  *              ebuild.sh, line 1156:  Called
> pkg_preinst
>  *   tcpdump-3.9.8.ebuild, line   67:  Called
> enewgroup 'tcpdump'
>  *          eutils.eclass, line  707:  Called die
>  * The specific snippet of code:
>  *              groupadd ${opts} ${egroup} || die
> "enewgroup failed"
>  *  The die message:
>  *   enewgroup failed
>  *
>  * If you need support, post the topmost build error,
> and the call stack if relevant.
>  * A complete build log is located at
> '/var/log/portage/net-analyzer:tcpdump-3.9.8:20080130-072451.log'.
>  *
> !!! FAILED preinst: 1
>
> google was not forthcoming. I added
> 'net-analyzer/tcpdump ~x86' to package.keywords but
> that didn't help.

Did you log out and back in again first?

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
--
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

> 
> Did you log out and back in again first?

Well, I just did and now I can't log back on. I enter
my user name, hit enter and it doesn't even ask for my
password, just says login incorrect, repeats that two
times and says my three chances are up.

PAM was emerged but maybe it wasn't activated, or is
that supposed to be automatic?

I'll have to chroot back into gentoo but after that I
don't have a clue.

Reporting via an XP box.

mw


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Hal Martin]

Re-emerge shadow and you should be able to login.

After that you'll need to reinstall services like sshd that have files
in /etc/pam.d/

-Hal

maxim wexler wrote:
>> Did you log out and back in again first?
>>     
>
> Well, I just did and now I can't log back on. I enter
> my user name, hit enter and it doesn't even ask for my
> password, just says login incorrect, repeats that two
> times and says my three chances are up.
>
> PAM was emerged but maybe it wasn't activated, or is
> that supposed to be automatic?
>
> I'll have to chroot back into gentoo but after that I
> don't have a clue.
>
> Reporting via an XP box.
>
> mw
>
>
>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
>   

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Wednesday 30 January 2008, maxim wexler wrote:
> > Did you log out and back in again first?
>
> Well, I just did and now I can't log back on. I enter
> my user name, hit enter and it doesn't even ask for my
> password, just says login incorrect, repeats that two
> times and says my three chances are up.
>
> PAM was emerged but maybe it wasn't activated, or is
> that supposed to be automatic?
>
> I'll have to chroot back into gentoo but after that I
> don't have a clue.

Well, the docs page on the upgrade to pam-0.99 is complete, I updated 
severala machines no problem with it. So you must have muffed the 
instructions. Next time, read the whole page.

Meanwhile, boot off a LiveCD or some other medium. or maintenance mode, 
chroot into gentoo and find all packages that depend on pam:

equery depends pam
or maybe
euse -i pam

then re-emerge all those packages. Don't think that revdep-rebuild will 
fix this for you, it probably won't as it's not a linking issue you 
have.

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

--- Alan McKinnon <alan.mckinnon@gmail.com> wrote:

> Well, the docs page on the upgrade to pam-0.99 is
> complete, I updated 
> severala machines no problem with it. So you must
> have muffed the 
> instructions. Next time, read the whole page.

While I was waiting I went back to the page and
decided I should probably emerge pam_chroot.
pam_userdb didn't seem to involve me so I left it
alone. Other than that I couldn't see what else
applied to my case except for the suggestion that
some, unamed, file should be edited. I notice that
since I apparently overleapt the main pam hurdle
/etc/pam.d has a new system-auth file in it. Must be
on the right track cause it didn't complain about
pam-0.99 when pam_chroot was emerged. Then I made
detour and updated a bunch of /etc files that had
popped up after having started the massive update. I
must have missed modprobe cause when I booted again a
boot warning flashed by, "warning modprobe.conf not
generated". Then it got to login where I was again not
allowed access. Does that have something to do with
modprobe.conf? PAM? Both?

> Meanwhile, boot off a LiveCD or some other medium.
> or maintenance mode, 
> chroot into gentoo and find all packages that depend
> on pam:
> 
> equery depends pam

AttributeError: Package instance has no attribute
'get_postmerge_deps'

> or maybe
> euse -i pam

no matching entries found
 
As for modprobe, I just chrooted again and ran
update-modules. I forgot to add -v on the first pass,
so I did it again with -v and it's telling me 

*Skipping /etc/modules.conf generation(prerequisites
not satisfied
*Skipping /etc/modprobe.conf generation (file is newer
than dependencies)
* The dir '/lib/modules/2.6.15-gentoo-r5/modules.dep'
does not exist, skipping call to depmod

So this is wierd: according to ls -l
/etc/modprobe.conf was just written. 

Or is it because the PC is in a chrooted environment
and uses a different set of modules?

-mw


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

--- Hal Martin <hal.martin@gmail.com> wrote:

> Re-emerge shadow and you should be able to login.
 
Yup, thanks!

> After that you'll need to reinstall services like
> sshd that have files
> in /etc/pam.d/

they seem to have started

But now, startx fails:

/etc/X11/xinit/xinitrc: line 45: startkde: command not
found

But all the /etc/X11 files are unchanged.

I tried to run fvwm:

ERROR: can't open display

The appropriate modules are loaded.

-mw



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Thursday 31 January 2008, maxim wexler wrote:

> But now, startx fails:
>
> /etc/X11/xinit/xinitrc: line 45: startkde: command not
> found

startkde is not in your $PATH. It's normal location is 

/usr/kde/3.5/bin/startkde

Either use an explicit full path to the binary or update your PATH


-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Wednesday 30 January 2008, maxim wexler wrote:
> --- Alan McKinnon <alan.mckinnon@gmail.com> wrote:
> > Well, the docs page on the upgrade to pam-0.99 is
> > complete, I updated
> > severala machines no problem with it. So you must
> > have muffed the
> > instructions. Next time, read the whole page.
>
> While I was waiting I went back to the page and
> decided I should probably emerge pam_chroot.
> pam_userdb didn't seem to involve me so I left it
> alone. Other than that I couldn't see what else
> applied to my case except for the suggestion that
> some, unamed, file should be edited. I notice that
> since I apparently overleapt the main pam hurdle
> /etc/pam.d has a new system-auth file in it. Must be
> on the right track cause it didn't complain about
> pam-0.99 when pam_chroot was emerged.

FWIW, I have a stock standard workstation system pam-wise. I hanged no 
files from the default, it all works and upgrades were seamless. Here's 
the pam modules I have:

nazgul / # eix ^pam | grep sys-auth
* sys-auth/pam-afs-session
* sys-auth/pam_abl
* sys-auth/pam_bioapi
* sys-auth/pam_chroot
* sys-auth/pam_dotfile
* sys-auth/pam_keyring
* sys-auth/pam_krb5
* sys-auth/pam_ldap
* sys-auth/pam_mktemp
* sys-auth/pam_mount
* sys-auth/pam_mysql
* sys-auth/pam_p11
* sys-auth/pam_passwdqc
* sys-auth/pam_pkcs11
* sys-auth/pam_pwdfile
* sys-auth/pam_require
* sys-auth/pam_sha512
* sys-auth/pam_skey
* sys-auth/pam_smb
* sys-auth/pam_ssh
* sys-auth/pam_ssh_agent
* sys-auth/pam_usb
* sys-auth/pam_userdb
* sys-auth/pam_blue [1]
* sys-auth/pam_pgsql [1]
* sys-auth/pam_sotp [1]

and my /etc/pam.d/

nazgul / # ls -al /etc/pam.d
total 146
drwxr-xr-x  2 root root 1072 2008-01-18 21:49 .
drwxr-xr-x 92 root root 5464 2008-01-29 23:56 ..
-rw-r--r--  1 root root  152 2007-11-09 19:03 chage
-rw-r--r--  1 root root  152 2007-11-09 19:03 chfn
-rw-r--r--  1 root root  103 2007-11-09 19:03 chgpasswd
-rw-r--r--  1 root root  152 2007-11-09 19:03 chpasswd
-rw-r--r--  1 root root  152 2007-11-09 19:03 chsh
-rw-r--r--  1 root root  123 2007-11-02 12:59 cron
-rw-r--r--  1 root root  113 2008-01-18 21:42 cups
-rw-r--r--  1 root root  106 2007-11-05 15:21 cvs
-rw-r--r--  1 root root  223 2008-01-07 23:05 entrance
-rw-r--r--  1 root root  152 2007-11-09 19:03 groupadd
-rw-r--r--  1 root root  152 2007-11-09 19:03 groupdel
-rw-r--r--  1 root root  103 2007-11-09 19:03 groupmems
-rw-r--r--  1 root root  152 2007-11-09 19:03 groupmod
-rw-r--r--  1 root root  362 2007-11-02 12:57 imap
lrwxrwxrwx  1 root root   15 2007-11-02 12:57 imap4 -> /etc/pam.d/imap
lrwxrwxrwx  1 root root   15 2007-11-02 12:57 imap4s -> /etc/pam.d/imap
lrwxrwxrwx  1 root root   15 2007-11-02 12:57 imaps -> /etc/pam.d/imap
-rw-r--r--  1 root root  197 2007-11-05 07:17 kde
-rw-r--r--  1 root root  196 2007-11-05 07:17 kde-np
-rw-r--r--  1 root root  563 2007-11-09 19:03 login
-rw-r--r--  1 root root  152 2007-11-09 19:03 newusers
-rw-r--r--  1 root root  139 2007-11-14 11:58 other
-rw-r--r--  1 root root  104 2007-11-09 19:03 passwd
-rw-r--r--  1 root root  362 2007-11-02 12:57 pop
lrwxrwxrwx  1 root root   14 2007-11-02 12:57 pop3 -> /etc/pam.d/pop
lrwxrwxrwx  1 root root   14 2007-11-02 12:57 pop3s -> /etc/pam.d/pop
lrwxrwxrwx  1 root root   14 2007-11-02 12:57 pops -> /etc/pam.d/pop
-rw-r--r--  1 root root  183 2007-11-02 12:58 ppp
-rw-r--r--  1 root root  397 2008-01-18 21:48 samba
-rw-r--r--  1 root root  160 2008-01-18 21:30 saslauthd
-rw-r--r--  1 root root   84 2007-11-05 18:32 screen
-rw-r--r--  1 root root  152 2007-11-09 19:03 shadow
-rw-r--r--  1 root root  205 2008-01-18 21:21 sshd
-rw-r--r--  1 root root 1059 2007-11-09 19:03 su
-rw-r--r--  1 root root  172 2008-01-18 21:25 sudo
-rw-r--r--  1 root root  447 2007-11-14 11:58 system-auth
-rw-r--r--  1 root root  152 2007-11-09 19:03 useradd
-rw-r--r--  1 root root  152 2007-11-09 19:03 userdel
-rw-r--r--  1 root root  152 2007-11-09 19:03 usermod
-rw-r--r--  1 root root  218 2008-01-16 09:24 vmware-guestd
-rw-r--r--  1 root root  125 2008-01-14 21:38 xserver


WorksForMe <shrug>

> Then I made 
> detour and updated a bunch of /etc files that had
> popped up after having started the massive update. I
> must have missed modprobe cause when I booted again a
> boot warning flashed by, "warning modprobe.conf not
> generated". Then it got to login where I was again not
> allowed access. Does that have something to do with
> modprobe.conf? PAM? Both?

Not related that I can see. modprobe.conf not being updated is a 
separate issue, solved by running modules-update in an existing root 
shell

> > Meanwhile, boot off a LiveCD or some other medium.
> > or maintenance mode,
> > chroot into gentoo and find all packages that depend
> > on pam:
> >
> > equery depends pam
>
> AttributeError: Package instance has no attribute
> 'get_postmerge_deps'
>
> > or maybe
> > euse -i pam
>
> no matching entries found
>
> As for modprobe, I just chrooted again and ran
> update-modules. I forgot to add -v on the first pass,
> so I did it again with -v and it's telling me
>
> *Skipping /etc/modules.conf generation(prerequisites
> not satisfied
> *Skipping /etc/modprobe.conf generation (file is newer
> than dependencies)
> * The dir '/lib/modules/2.6.15-gentoo-r5/modules.dep'
> does not exist, skipping call to depmod
>
> So this is wierd: according to ls -l
> /etc/modprobe.conf was just written.

The mtime does not mean that the file was not written.

I'd be more worried why you don't have 
a /lib/modules/2.6.15-gentoo-r5/modules.dep.

Look into your /etc/modules.d/ and modprobe.conf and see what's there.

> Or is it because the PC is in a chrooted environment
> and uses a different set of modules?

No, chroot uses the running kernel. It's not a virtualised environment.

Maxim, I've been watching your posts for a while now, and most times 
it's because you made some blunder that is quite elementary and that 
you really should know. Your problem seems to be a lack of 
understanding of how Unix works.

You really really need to start reading documentation. Your gentoo life 
will go much easier when you do.


-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

--- Alan McKinnon <alan.mckinnon@gmail.com> wrote:
> startkde is not in your $PATH. It's normal location
> is 
> 
> /usr/kde/3.5/bin/startkde
> 
> Either use an explicit full path to the binary or
> update your PATH

Actually, startkde doe not exist on my machine.
Probably cause I'm in the midst of upgrading kde via
-uD world and having a rough time of it ;(


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

> I'd be more worried why you don't have 
> a /lib/modules/2.6.15-gentoo-r5/modules.dep.

never have 
$ls /lib/modules
2.6.12-gentoo-r6 2.6.16-gentoo-r3 2.6.20-gentoo-r6

> 
> Look into your /etc/modules.d/ and modprobe.conf and
> see what's there.

it's fixed

> Maxim, I've been watching your posts for a while
> now, and most times 

Thanks, glad to know someone is reading em

> 
=== message truncated ===



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Thursday 31 January 2008, maxim wexler wrote:
> --- Alan McKinnon <alan.mckinnon@gmail.com> wrote:
> > startkde is not in your $PATH. It's normal location
> > is
> >
> > /usr/kde/3.5/bin/startkde
> >
> > Either use an explicit full path to the binary or
> > update your PATH
>
> Actually, startkde doe not exist on my machine.
> Probably cause I'm in the midst of upgrading kde via
> -uD world and having a rough time of it ;(

It's installed by kdebase-startkde

I you use the -meta kde packages, get it by emerging kdebase-meta (I 
can't think of a reason why anyone wouldn't want all of kdebase so 
there's no need to emerge startkde explicitly)

If you use the monolithic kde packages then emerge kdebase.

If you want all of kde, then emerge kdebase or kdebase-meta as 
appropriate and when it's done, startkde will be present

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Alan McKinnon]

On Thursday 31 January 2008, maxim wexler wrote:
> > Look into your /etc/modules.d/ and modprobe.conf and
> > see what's there.
>
> it's fixed

Well that's good news. Looks like we are getting there. Slowly, but 
getting there.

If it's any consolation, I knwo what this feels like. I too have done 
emerge world on a box that hadn't seen the internet for almost a year. 
That was painful too :-)

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

> nazgul / # eix ^pam | grep sys-auth

Hmm, on my machine the top of the list says that there
is an invalid line in package.keywords:

">=kde-base/kde-passwd-4.0.0:kde-4" You have a
operator but we can't find a version-part

I think that was part of a list someone lent me. But
this is the first that I heard it was problem. Usually
I get the "invalid atom" and the process halts.

The rest of the list is identical otherwise except for
these last three which I don't have:

> * sys-auth/pam_blue [1]
> * sys-auth/pam_pgsql [1]
> * sys-auth/pam_sotp [1]
> 
> and my /etc/pam.d/

Mine is a lot like yours; a few exceptions, eg, no
cups. But that's understandable cause I have no printer.


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[maxim wexler]

> 
> If it's any consolation, I knwo what this feels
> like. I too have done 
> emerge world on a box that hadn't seen the internet
> for almost a year. 
> That was painful too :-)

I'm always online but my bandwidth is so narrow
downloading anything takes over the entire stream --
can't even answer e-mail. So, I keep putting off the
updates, while the foundation crumbles unseen ;(

mw


      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] pam fixed now it's tcpdump

[Peter Humphrey]

On Thursday 31 January 2008 21:44:19 Alan McKinnon wrote:

> I can't think of a reason why anyone wouldn't want all of kdebase so
> there's no need to emerge startkde explicitly

I did install startkde on this box. Six packages would now be installed if I 
were to emerge kdebase-meta, namely kdebugdialog, ksysguard, ktip, klipper, 
knetattach and kpager. I don't miss any of those, so what do you think I'm 
losing by not installing them?

I think that installing startkde is the first step on the road to a lean 
system, which I imagine is its purpose. Long may it continue!

-- 
Rgds
Peter
-- 
gentoo-user@lists.gentoo.org mailing list