Public bug reported:

The default libpam-wtmpdb session config in Resolute is:

session optional                        pam_wtmpdb.so skip_if=sshd

The 'skip_if=sshd' option stops ssh logins from being recorded in
wtmpdb.

This is because on Debian, openssh-server is configured to log extra
information directly through libwtmpdb0 and we wish to avoid duplicates
(https://bugs.debian.org/1102643).

On Ubuntu, this capability is dropped in openssh-server
(https://git.launchpad.net/ubuntu/+source/openssh/commit/?h=applied/ubuntu/resolute-
devel&id=83257ab2d0e9f31dd6a8f1cfea5e2d8f90fbcc6b) because libwmpdb0 is
not in main (See MIR LP: #2095496).

The end result is that no ssh logins are recorded in wtmpdb.

To fix this in Ubuntu while libwtmpdb0 is not an eligible dependency for
openssh-server, the "skip_if=sshd" option would need to be removed (see
patch).

ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: libpam-wtmpdb 0.75.0-5
ProcVersionSignature: Ubuntu 6.17.0-5.5-generic 6.17.0-rc7
Uname: Linux 6.17.0-5-generic x86_64
ApportVersion: 2.33.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: unknown
Date: Thu Nov  6 23:31:53 2025
ProcEnviron:
 PATH=(custom, no user)
 SHELL=/bin/bash
 TERM=linux
SourcePackage: wtmpdb
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: wtmpdb (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug resolute

** Patch added: 
"0001-Revert-pam-config-inhibit-likely-duplicate-ssh-entri.patch"
   
https://bugs.launchpad.net/bugs/2130851/+attachment/5924913/+files/0001-Revert-pam-config-inhibit-likely-duplicate-ssh-entri.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2130851

Title:
  default wtmpdb pam config skips ssh connections leaving sessions
  unlogged

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2130851/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to