Bug 598

Summary:	После dist-upgrade от 08.02 перестал пускать в систему
Product:	Sisyphus	Reporter:	serg <spr>
Component:	vlock	Assignee:	Alexey Gladkov <legion>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	minor
Priority:	P4	CC:	glebfm, ldv, legion, placeholder
Version:	unstable
Hardware:	all
OS:	Linux

Description serg 2002-02-11 11:55:04 MSK

Дописал 
auth    required        /lib/security/pam_stack.so service=system-auth debug
результат в additional info
---

---
Feb 11 20:29:27 sergey pam_tcb[13625]: Child died with signal 13
Feb 11 20:29:27 sergey pam_tcb[13625]: vlock: Authentication failed for sergey from sergey(uid=501)
Feb 11 20:29:27 sergey pam_stack[13625]: substack returned 6 (Permission denied)
Feb 11 20:29:27 sergey pam_stack[13625]: passing PAM_AUTHTOK to parent
Feb 11 20:29:27 sergey pam_stack[13625]: NOT passing PAM_CONV to parent: destination already set
Feb 11 20:29:27 sergey pam_stack[13625]: passing PAM_FAIL_DELAY to parent
Feb 11 20:29:27 sergey pam_stack[13625]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL
Feb 11 20:29:27 sergey pam_stack[13625]: NOT passing PAM_RHOST to parent: source is NULL
Feb 11 20:29:27 sergey pam_stack[13625]: NOT passing PAM_RUSER to parent: source is NULL
Feb 11 20:29:27 sergey pam_stack[13625]: passing PAM_SERVICE to parent
Feb 11 20:29:27 sergey pam_stack[13625]: passing PAM_TTY to parent
Feb 11 20:29:27 sergey pam_stack[13625]: passing PAM_USER to parent
Feb 11 20:29:27 sergey pam_stack[13625]: NOT passing PAM_USER_PROMPT to parent: source is NULL
Feb 11 20:29:27 sergey pam_stack[13625]: passing data back
Feb 11 20:29:27 sergey pam_stack[13625]: passing former back
Feb 11 20:29:27 sergey pam_stack[13625]: returning 6 (Permission denied)
Feb 11 20:29:29 sergey pam_stack[13625]: freeing stack data for `system-auth\' service
Feb 11 20:29:29 sergey pam_stack[13625]: called for \&quot;PAM_AUTHENTICATE\&quot;
Feb 11 20:29:29 sergey pam_stack[13625]: called from \&quot;vlock\&quot;
Feb 11 20:29:29 sergey pam_stack[13625]: initializing
Feb 11 20:29:29 sergey pam_stack[13625]: creating child stack `system-auth\'
Feb 11 20:29:29 sergey pam_stack[13625]: creating environment
Feb 11 20:29:29 sergey pam_stack[13625]: NOT passing PAM_AUTHTOK to child: source is NULL
Feb 11 20:29:29 sergey pam_stack[13625]: passing PAM_CONV to child
Feb 11 20:29:29 sergey pam_stack[13625]: NOT passing PAM_FAIL_DELAY to child: source not set
Feb 11 20:29:29 sergey pam_stack[13625]: NOT passing PAM_OLDAUTHTOK to child: source is NULL
Feb 11 20:29:29 sergey pam_stack[13625]: NOT passing PAM_RHOST to child: source is NULL
Feb 11 20:29:29 sergey pam_stack[13625]: NOT passing PAM_RUSER to child: source is NULL
Feb 11 20:29:29 sergey pam_stack[13625]: passing PAM_SERVICE to child
Feb 11 20:29:29 sergey pam_stack[13625]: passing PAM_TTY to child
Feb 11 20:29:29 sergey pam_stack[13625]: passing PAM_USER to child
Feb 11 20:29:30 sergey pam_stack[13625]: NOT passing PAM_USER_PROMPT to child: source is NULL
Feb 11 20:29:30 sergey pam_stack[13625]: passing data to child
Feb 11 20:29:30 sergey pam_stack[13625]: calling substack

Comment 1 Dmitry V. Levin 2002-02-11 13:26:26 MSK

Cannot reproduce this (tested both on up and smp servers).
Please provide more information, e.g. /etc/pam.d/system-auth file.

Comment 2 Dmitry V. Levin 2002-02-11 13:26:26 MSK

Cannot reproduce this (tested both on up and smp servers).
Please provide more information, e.g. /etc/pam.d/system-auth file.

Comment 3 serg 2002-02-12 03:32:25 MSK

/etc/pam.d/vlock
#%PAM-1.0
auth    required        /lib/security/pam_stack.so service=system-auth debug
account required        /lib/security/pam_deny.so
password        required        /lib/security/pam_deny.so
session required        /lib/security/pam_deny.so

/etc/pam.d/system-auth
#%PAM-1.0
auth    required        /lib/security/pam_tcb.so shadow fork nullok
account required        /lib/security/pam_tcb.so shadow fork
password        required        /lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3
password        required        /lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb
session required        /lib/security/pam_tcb.so
session required        /lib/security/pam_limits.so

/etc/nsswitch.conf
passwd:     files nisplus nis
shadow:     tcb files nisplus nis
group:      files nisplus nis

Comment 4 serg 2002-02-12 03:32:25 MSK

/etc/pam.d/vlock
#%PAM-1.0
auth    required        /lib/security/pam_stack.so service=system-auth debug
account required        /lib/security/pam_deny.so
password        required        /lib/security/pam_deny.so
session required        /lib/security/pam_deny.so

/etc/pam.d/system-auth
#%PAM-1.0
auth    required        /lib/security/pam_tcb.so shadow fork nullok
account required        /lib/security/pam_tcb.so shadow fork
password        required        /lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3
password        required        /lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb
session required        /lib/security/pam_tcb.so
session required        /lib/security/pam_limits.so

/etc/nsswitch.conf
passwd:     files nisplus nis
shadow:     tcb files nisplus nis
group:      files nisplus nis

Comment 5 Dmitry V. Levin 2002-03-12 19:29:31 MSK

Try to replace
auth required /lib/security/pam_tcb.so shadow fork nullok
with
auth required /lib/security/pam_tcb.so shadow nullok
i.e. remove \&quot;fork\&quot; from parameters list to pam_tcb.so

Comment 6 Dmitry V. Levin 2002-03-12 19:29:31 MSK

Try to replace
auth required /lib/security/pam_tcb.so shadow fork nullok
with
auth required /lib/security/pam_tcb.so shadow nullok
i.e. remove \&quot;fork\&quot; from parameters list to pam_tcb.so

Comment 7 serg 2002-03-13 03:12:15 MSK

do it but nothin to change :-(

start vicq
Mar 13 12:13:23 sergey pam_stack[5706]: called for \&quot;PAM_AUTHENTICATE\&quot;
Mar 13 12:13:23 sergey pam_stack[5706]: called from \&quot;vlock\&quot;
Mar 13 12:13:23 sergey pam_stack[5706]: initializing
Mar 13 12:13:23 sergey pam_stack[5706]: creating child stack `system-auth\'
Mar 13 12:13:23 sergey pam_stack[5706]: creating environment
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_AUTHTOK to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_CONV to child
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_FAIL_DELAY to child: source not set
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_RHOST to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_RUSER to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_SERVICE to child
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_TTY to child
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_USER to child
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing data to child
Mar 13 12:13:23 sergey pam_stack[5706]: calling substack


try login:
Mar 13 12:19:19 sergey tcb_chkpwd[5860]: user unknown
Mar 13 12:19:19 sergey pam_tcb[5706]: vlock: Authentication failed for sergey from sergey(uid=501)
Mar 13 12:19:19 sergey pam_stack[5706]: substack returned 7 (Authentication failure)
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_AUTHTOK to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_CONV to parent: destination already set
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_FAIL_DELAY to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_RHOST to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_RUSER to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_SERVICE to parent
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_TTY to parent
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_USER to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: passing data back
Mar 13 12:19:19 sergey pam_stack[5706]: passing former back
Mar 13 12:19:19 sergey pam_stack[5706]: returning 7 (Authentication failure)
Mar 13 12:19:21 sergey pam_stack[5706]: freeing stack data for `system-auth\' service
Mar 13 12:19:21 sergey pam_stack[5706]: called for \&quot;PAM_AUTHENTICATE\&quot;
Mar 13 12:19:21 sergey pam_stack[5706]: called from \&quot;vlock\&quot;
Mar 13 12:19:21 sergey pam_stack[5706]: initializing
Mar 13 12:19:21 sergey pam_stack[5706]: creating child stack `system-auth\'
Mar 13 12:19:21 sergey pam_stack[5706]: creating environment
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_AUTHTOK to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_CONV to child
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_FAIL_DELAY to child: source not set
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_RHOST to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_RUSER to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_SERVICE to child
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_TTY to child
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_USER to child
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing data to child
Mar 13 12:19:21 sergey pam_stack[5706]: calling substack

Comment 8 serg 2002-03-13 03:12:15 MSK

do it but nothin to change :-(

start vicq
Mar 13 12:13:23 sergey pam_stack[5706]: called for \&quot;PAM_AUTHENTICATE\&quot;
Mar 13 12:13:23 sergey pam_stack[5706]: called from \&quot;vlock\&quot;
Mar 13 12:13:23 sergey pam_stack[5706]: initializing
Mar 13 12:13:23 sergey pam_stack[5706]: creating child stack `system-auth\'
Mar 13 12:13:23 sergey pam_stack[5706]: creating environment
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_AUTHTOK to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_CONV to child
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_FAIL_DELAY to child: source not set
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_RHOST to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_RUSER to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_SERVICE to child
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_TTY to child
Mar 13 12:13:23 sergey pam_stack[5706]: passing PAM_USER to child
Mar 13 12:13:23 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to child: source is NULL
Mar 13 12:13:23 sergey pam_stack[5706]: passing data to child
Mar 13 12:13:23 sergey pam_stack[5706]: calling substack


try login:
Mar 13 12:19:19 sergey tcb_chkpwd[5860]: user unknown
Mar 13 12:19:19 sergey pam_tcb[5706]: vlock: Authentication failed for sergey from sergey(uid=501)
Mar 13 12:19:19 sergey pam_stack[5706]: substack returned 7 (Authentication failure)
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_AUTHTOK to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_CONV to parent: destination already set
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_FAIL_DELAY to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_RHOST to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_RUSER to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_SERVICE to parent
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_TTY to parent
Mar 13 12:19:19 sergey pam_stack[5706]: passing PAM_USER to parent
Mar 13 12:19:19 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to parent: source is NULL
Mar 13 12:19:19 sergey pam_stack[5706]: passing data back
Mar 13 12:19:19 sergey pam_stack[5706]: passing former back
Mar 13 12:19:19 sergey pam_stack[5706]: returning 7 (Authentication failure)
Mar 13 12:19:21 sergey pam_stack[5706]: freeing stack data for `system-auth\' service
Mar 13 12:19:21 sergey pam_stack[5706]: called for \&quot;PAM_AUTHENTICATE\&quot;
Mar 13 12:19:21 sergey pam_stack[5706]: called from \&quot;vlock\&quot;
Mar 13 12:19:21 sergey pam_stack[5706]: initializing
Mar 13 12:19:21 sergey pam_stack[5706]: creating child stack `system-auth\'
Mar 13 12:19:21 sergey pam_stack[5706]: creating environment
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_AUTHTOK to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_CONV to child
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_FAIL_DELAY to child: source not set
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_OLDAUTHTOK to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_RHOST to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_RUSER to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_SERVICE to child
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_TTY to child
Mar 13 12:19:21 sergey pam_stack[5706]: passing PAM_USER to child
Mar 13 12:19:21 sergey pam_stack[5706]: NOT passing PAM_USER_PROMPT to child: source is NULL
Mar 13 12:19:21 sergey pam_stack[5706]: passing data to child
Mar 13 12:19:21 sergey pam_stack[5706]: calling substack

Comment 9 serg 2002-03-13 03:14:46 MSK

SORRY!!! correct - start vlock !!! :-)
совсем уже ...

Comment 10 serg 2002-03-13 03:14:46 MSK

SORRY!!! correct - start vlock !!! :-)
совсем уже ...

Comment 11 Dmitry V. Levin 2002-03-13 09:53:54 MSK

These lines
---
Mar 13 12:19:19 sergey tcb_chkpwd[5860]: user unknown
Mar 13 12:19:19 sergey pam_tcb[5706]: vlock: Authentication failed for sergey from sergey(uid=501)
---
mean that smth is broken in your system.

Comment 12 Dmitry V. Levin 2002-03-13 09:53:54 MSK

These lines
---
Mar 13 12:19:19 sergey tcb_chkpwd[5860]: user unknown
Mar 13 12:19:19 sergey pam_tcb[5706]: vlock: Authentication failed for sergey from sergey(uid=501)
---
mean that smth is broken in your system.