Arne Nordmark <[email protected]> writes:
> When using pam_afs_session with local logins for vsftp, a vsftp process
> hangs on wait4() shortly after completing pam_setcred(), hanging the ftp
> connection.
> While running pam, vsftp has a handler for SIGCHLD installed, recording
> the signal for the exit of /usr/bin/aklog. The pending signal is then
> acted upon later on in vsftp, resulting in a wait4() that has no chance
> of completing.
> Comparing with other PAM modules, I found that pam_tmpdir also runs a
> helper application, but in contrast to pam_afs_session, a default signal
> handler for SIGCHLD in installed for the duration of the fork()-wait().
> It seems reasonable that also pam_afs_session should make sure that a
> signal handler for SIGCHLD from the calling process is not triggered
> by the running of aklog.
This is fixed in Git and will be in the 2.5 release, which I'm hoping to
finish fairly soon. In the meantime, if you want an early sneak preview,
the code is available from the Git repository linked from:
http://www.eyrie.org/~eagle/software/pam-afs-session/
Thank you for the report! I hadn't thought about this possibility.
--
Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
