** Description changed:

  Hardware: Samsung NC-10 netbook, 2GB memory upgrade
  
  OS: Dual boot
  OS-1: Ubuntu 9.04 upgraded from 8.10 via update manager (via internet)
  OS-2: Windows XP Pro SP3 in a separate partition.
  
  Symptoms: 
  After upgrade any action that required authentication of my account 
(uid=1000)  takes approximately 30 sec to complete.
  The problem appeared after upgrading from 8.10 to 9.04.
  
  Cause:
  After research it appeared that the problem is related to the pam_krb5.so 
module placed on top of the auth stack in /etc/pam.d/common-auth for users with 
uid>=1000 (i.e. regular interactive users). Commenting the line fixed the 
problem instantly.
  
  Question:
- Now, the question is why did updater placed that line in there? On other 
machines that updated from 8.10 to 9.04 the auth stack consisted just of 
pam_unix.so. Note that on mine pam_unix.so was #2 (after pam_krb5.so), but then 
#3 was pam_ldap.so - which is also absent on other upgraded machines. Would 
appreciate any insights on this. Thank you.
+ Now, the question is why did updater placed that line in there? This machine 
had libpam-krb5 package installed at one time(apparently before the upgrade but 
I do not remember installing it). This for some reason did not cause problems 
before the upgrade but revealed right after it. 
+ 
+ Warning:
+ Once I determined the cause and was playing with solution (like uninstalling 
libpam-krb5) I found one scary thing. If the pam_krb5.so line is left in the 
/etc/pam.d/common-auth after removal of the libpam-krb5 package, the 
authentication fails. I noticed this while trying to issue some 'sudo' commands 
in the terminal window. Since I had Synaptic package manager still open I 
immediately reinstalled the libpam-krb5 which fixed the authentication. I then 
was able to remove the krb5 line from the /etc/pam.d/common-auth (for which I 
needed the sudo) and then uninstalled libpam-krb5 for good. I have a feeling 
that if not for already open package manager, I could have rendered the system 
unusable - all too easy, just because there was krb5 line and there was no krb5 
installed (!).

-- 
Authentication hangs for 30 sec on upgraded Ubuntu 9.04 due to krb5 placed in 
auth stack
https://bugs.launchpad.net/bugs/373435
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to