Hi,
synaptic includes a pam configuration file which is broken on x86_64,
because the module paths are hard-coded as lib/security/* whereas on
x86_64 this should be lib64/security.
But actually you can avoid the path problem by just naming the pam
modules, pam will figure out the path depending on your arch.
I am attaching a patch (*_pam_1.patch) to the synaptic SPEC file for
this. This patch should work everywhere.
Additionally, the pam config file uses the obsolete pam_stack module,
instead of the include mechanism which is provided in pam since 0.78.
Using "include", you can simply refer to a system-wide pam config file
such as config-util. This seems to be the correct way to do things at
least on rhel5/centos5, see the many examples in /etc/pam.d (eg
wireshark and most system-config-* files).
The second patch (*_pam_2.patch) uses this mechanism. I've tested it on
centos5 and it's fine, but I don't know if it will work on some of the
older distributions (basically they would need pam >= 0.78, and the pam
package has to include /etc/pam.d/config-util).
The patches are not cumulative, you should use one or the other but not
both.
Hope this helps!
cheers,
Nicolas
--- synaptic.spec 2006-06-23 17:35:32.000000000 +0200
+++ synaptic_new_1.spec 2008-09-02 17:16:08.000000000 +0200
@@ -5,7 +5,7 @@
Summary: Graphical package management program using apt
Name: synaptic
Version: 0.57.2
-Release: 3.rf
+Release: 4.rf
License: GPL
Group: Applications/System
URL: http://www.nongnu.org/synaptic/
@@ -46,13 +46,13 @@
%{__cat} <<EOF >synaptic.pam
#%PAM-1.0
-auth sufficient /lib/security/pam_rootok.so
-auth sufficient /lib/security/pam_timestamp.so
-auth required /lib/security/pam_stack.so service=system-auth
-session required /lib/security/pam_permit.so
-session optional /lib/security/pam_xauth.so
-session optional /lib/security/pam_timestamp.so
-account required /lib/security/pam_permit.so
+auth sufficient pam_rootok.so
+auth sufficient pam_timestamp.so
+auth required pam_stack.so service=system-auth
+session required pam_permit.so
+session optional pam_xauth.so
+session optional pam_timestamp.so
+account required pam_permit.so
EOF
%{__cat} <<EOF >data/synaptic.desktop.in
@@ -122,6 +122,9 @@
%changelog
+* Tue Sep 02 2008 Nicolas Thierry-Mieg <[EMAIL PROTECTED]> - 0.57.2-4
+- Removed module paths in pam file to fix x86_64 issue.
+
* Fri Jun 23 2006 Dag Wieers <[EMAIL PROTECTED]> - 0.57.2-3 - 4330+/dag
- Added more patches to make synaptic work with apt-0.5.15lorg3.2.
--- synaptic.spec 2006-06-23 17:35:32.000000000 +0200
+++ synaptic_new.spec 2008-09-02 16:48:43.000000000 +0200
@@ -5,7 +5,7 @@
Summary: Graphical package management program using apt
Name: synaptic
Version: 0.57.2
-Release: 3.rf
+Release: 4.rf
License: GPL
Group: Applications/System
URL: http://www.nongnu.org/synaptic/
@@ -46,13 +46,9 @@
%{__cat} <<EOF >synaptic.pam
#%PAM-1.0
-auth sufficient /lib/security/pam_rootok.so
-auth sufficient /lib/security/pam_timestamp.so
-auth required /lib/security/pam_stack.so service=system-auth
-session required /lib/security/pam_permit.so
-session optional /lib/security/pam_xauth.so
-session optional /lib/security/pam_timestamp.so
-account required /lib/security/pam_permit.so
+auth include config-util
+account include config-util
+session include config-util
EOF
%{__cat} <<EOF >data/synaptic.desktop.in
@@ -122,6 +118,9 @@
%changelog
+* Tue Sep 02 2008 Nicolas Thierry-Mieg <[EMAIL PROTECTED]> - 0.57.2-4
+- Changed pam file for x86_64, and use "include" instead of pam_stack.
+
* Fri Jun 23 2006 Dag Wieers <[EMAIL PROTECTED]> - 0.57.2-3 - 4330+/dag
- Added more patches to make synaptic work with apt-0.5.15lorg3.2.
_______________________________________________
users mailing list
[email protected]
http://lists.rpmforge.net/mailman/listinfo/users
