On 04/19/2012 02:51 PM, Neil Bothwick wrote: > On Thu, 19 Apr 2012 13:58:42 -0700, walt wrote: > >>> I upgraded to sys-auth/pambase-20120417 and sys-apps/shadow-4.1.5-r1 >>> and found I couldn't login to a new session or use su. Rebooting only >>> made the problem permanent, I had to SSH in to revert to >>> sys-auth/pambase-20101024-r2 and sys-apps/shadow-4.1.5. >> >> I've never been clear on how ssh authenticates a new login. Why would >> your ssh login be accepted? Did you ssh in as a user and su to root? > > That would have failed on su. It works because I have key authentication > for SSH. Otherwise I'd have been screwed.
That seems like a (possibly) helpful clue. When you downgraded, did you do etc-update again, or were you asked to? Did you run it after the original upgrade? I see that almost all of /etc/pam.d/* have today's date on them, the only exceptions being samba, sshd, imap, sudo, polkit-1, and start-stop-daemon.