tags 335273 confirmed
thanks

On Sat, Oct 22, 2005 at 09:58:42PM -0500, mathew wrote:
> Package: libpam-modules
> Version: 0.79-3

> Contents of /etc/pam.d/su:

> auth    sufficient      pam_rootok.so
> auth    required        pam_wheel.so
> auth    required        pam_unix.so
> auth    required        pam_tally.so onerr=fail
> #account        required        pam_tally.so deny=5
> account required        pam_unix.so
> password        required        pam_unix.so
> session required        pam_unix.so

> Uncomment the commented line, and su fails with a segmentation fault. 
> Leave it commented, and su works.

> Have checked that my user tally is 0, and I'm in the wheel group.

> Linux T41p 2.6.10-meta #1 Fri Feb 11 17:00:55 CST 2005 i686 GNU/Linux
> Debian testing.
> libc6 Version: 2.3.5-6

> Discovered the problem because after an apt-get upgrade I couldn't log 
> in, as every pam.d service config was using pam_tally. :-(

Confirmed.  This looks like a behavior change in libpam0g, as pam_set_data's
behavior does not match the documentation.  Will dig deeper.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/

Attachment: signature.asc
Description: Digital signature

Reply via email to