Package: libpam-modules
Version: 1.1.0-4
Severity: important

after a recent upgrade of libpam-modules, i could not authenticate local users 
anymore.

trying to login as root logs the following to /var/log/auth.log:

<snip:/var/log/auth.log>
Sep 28 09:57:37 hal9000 login[4084]: PAM unable to 
dlopen(/lib/security/pam_unix_auth.so): /lib/security/pam_unix_auth.so: cannot 
open shared object file: No such file or directory
Sep 28 09:57:37 hal9000 login[4084]: PAM adding faulty module: 
/lib/security/pam_unix_auth.so
Sep 28 09:57:37 hal9000 login[4084]: PAM unable to 
dlopen(/lib/security/pam_unix_acct.so): /lib/security/pam_unix_acct.so: cannot 
open shared object file: No such file or directory
Sep 28 09:57:37 hal9000 login[4084]: PAM adding faulty module: 
/lib/security/pam_unix_acct.so
Sep 28 09:58:08 hal9000 login[4311]: FAILED LOGIN (3) on '/dev/tty3' FOR 
'root', User not known to the underlying authentication module
</snip:/var/log/auth.log>

note the "user 'root' not known to the underlying authentication module" 
at the end.

luckily i'm using both pam_unix and pam_ldap to authenticate users and have 
set up sudo, so i could still become root (as a user stored in ldap).
the problem (as indicated by the errors in auth.log) turned out to be that 
/lib/security/pam_unix_auth.so and /lib/security/pam_unix_acct.so were 
referenced in my pam.d/ setup but appear to have vanished from my harddisk.
according to http://packages.debian.org, the file /lib/security/pam_unix_auth.so
is supposed to be in the sid package of libpam-modules, which it is not.

changing my pam.d/ configuration to use pam_unix.so rather than the sub-modules
pam_unix_auth.so and pam_unix_acct.so fixed the problem and i can log in again.

i don't remember any warning about the disappearing modules during the upgrade,
and/or that i'm supposed to touch my pam.d/ in order to keep my system running.

mgasdr
IOhannes



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-2-686 (SMP w/2 CPU cores)
Locale: lang=de...@euro, lc_ctype=de...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-modules depends on:
ii  debconf [debconf-2.0]         1.5.27     Debian configuration management sy
ii  libc6                         2.9-25     GNU C Library: Shared libraries
ii  libdb4.7                      4.7.25-7   Berkeley v4.7 Database Libraries [
ii  libpam0g                      1.1.0-4    Pluggable Authentication Modules l
ii  libselinux1                   2.0.85-4   SELinux runtime shared libraries

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to