Package: libpam-mount
Version: 0.44-1+lenny3
Severity: important
When trying to mount cifs shares using .pam_mount.conf.xml as a user (with
luserconf enabled in /etc/security/pam_mount.conf.xml) the login program
will crash:
Jan 29 11:41:44 debussy kernel: [ 3780.327796] login[22399]: segfault at 0
ip 7f43a5aa3a92 sp 7fffae3a1a98 error 4 in libc-2.7.so[7f43a5a29000+14a000]
As the user loging in with telnet, I can only see the following:
------------------
pam_mount(rdconf1.c:617) path to luserconf set to
/home/ethaden/.pam_mount.conf.xml
pam_mount(pam_mount.c:458) Entered pam_mount session stage
pam_mount(pam_mount.c:479) back from global readconfig
pam_mount(pam_mount.c:483) going to readconfig user
pam_mount(pam_mount.c:488) back from user readconfig
pam_mount(misc.c:43) Session open: (uid=0, euid=0, gid=1000, egid=1000)
pam_mount(rdconf2.c:198) checking sanity of volume record (VOLUME NAME)
Connection closed by foreign host.
------------------
However when using the same volume definitions in the pam_mount main config
file, everything works fine (with empty .pam_mount.conf.xml file in the home
dir).
I'm using the standard config file with the following changes:
---------------
<luserconf name=".pam_mount.conf.xml" />
<mntoptions
allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other,iocharset,noperm"
/>
<!--
<mntoptions deny="suid,dev" />
<mntoptions allow="*" />
<mntoptions deny="*" />
-->
<mntoptions require="nosuid,nodev" />
--------------
My user pam-mount config file contains the following ("anonymized" share
and server names):
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
<pam_mount>
<volume options="nosuid,nodev,noperm,iocharset=utf8"
mountpoint="/home/user/mnt/SERVER/SHARE"
path="SHARE"
user="user"
server="SERVER"
fstype="cifs" />
</pam_mount>
The file /etc/pam.d/login looks like this:
--------------
# See comments in /etc/login.defs
session optional pam_mail.so standard
# SELinux needs to intervene at login time to ensure that the process
# starts in the proper default security context.
# Uncomment the following line to enable SELinux
# session required pam_selinux.so select_context
# Standard Un*x account and session
@include common-account
@include common-session
@include common-pammount
@include common-password
--------------
-- System Information:
Debian Release: 5.0
APT prefers testing
APT policy: (650, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libpam-mount depends on:
ii debconf 1.5.24 Debian configuration management sy
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libhx13 1.18-1 A library providing queue, tree, I
ii libpam0g 1.0.1-5 Pluggable Authentication Modules l
ii libssl0.9.8 0.9.8g-15 SSL shared libraries
ii libxml-writer-perl 0.604-1 Perl module for writing XML docume
ii libxml2 2.6.32.dfsg-5 GNOME XML library
ii mount 2.13.1.1-1 Tools for mounting and manipulatin
libpam-mount recommends no packages.
Versions of packages libpam-mount suggests:
pn cryptsetup <none> (no description available)
pn davfs2 <none> (no description available)
ii fuse-utils 2.7.4-1.1 Filesystem in USErspace (utilities
ii lsof 4.78.dfsg.1-4 List open files
pn ncpfs <none> (no description available)
ii openssl 0.9.8g-15 Secure Socket Layer (SSL) binary a
ii psmisc 22.6-1 Utilities that use the proc filesy
ii smbfs 2:3.2.5-4 mount and umount commands for the
pn truecrypt-utils <none> (no description available)
-- debconf information:
* libpam-mount/convert-xml-config: true
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
