Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 153208 - pam_tally broken in pam-0.79-1
Summary: pam_tally broken in pam-0.79-1
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: pam
Version: rawhide
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-04-03 01:41 UTC by Thomas Zehetbauer
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version: pam-0.79-2
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-04-03 17:15:54 UTC


Attachments (Terms of Use)

Description Thomas Zehetbauer 2005-04-03 01:41:29 UTC
I could no longer login/su after updating to pam-0.79-1

/etc/pam.d/system-auth contained:
  auth        optional      pam_tally.so no_magic_root
  account     required      pam_tally.so deny=5 no_magic_root
causes the following to be logged
  pam_tally: unknown option; no_magic_root
  pam_tally: option deny=5 allowed in auth phase only
  pam_tally: unknown option; no_magic_root
  su(pam_unix)[16773]: session opened for user root by thomasz(uid=500)
  pam_tally: unknown option; no_magic_root
  kernel: su[16774]: segfault at 0000000000000000 rip 00002aaaadfbb530 rsp
00007ffffffff450 error 4
and with the options removed:
  su(pam_unix)[17007]: session opened for user root by thomasz(uid=500)
  su(pam_unix)[17007]: session closed for user root
  kernel: su[17008]: segfault at 0000000000000000 rip 00002aaaadfbb530 rsp
00007ffffffff450 error 4

Comment 1 Tomas Mraz 2005-04-03 16:31:17 UTC
The pam_tally module is redesigned in pam-0.79. This redesign was necessary to
fix bug 60930.

So you need to rearrange the options according to the README.pam_tally provided
with the package.

However su shouldn't segfault. So could you please attach your
/etc/pam.d/system-auth and /etc/pam.d/su here and also could you please try to
obtain a backtrace from the crashing su binary?


Comment 2 Tomas Mraz 2005-04-03 17:15:54 UTC
Actually it's not necessary anymore - I know where the bug is. Upgrade to
pam-0.79-2 when it's available. However you will need to rearrange the options
anyway.



Note You need to log in before you can comment on or make changes to this bug.