Package: libpam-modules
Version: 1.0.1-5+lenny1
Severity: important

Hello:
    After reading through the original bug report and the one submitted 
to Ubuntu (#327597), I think there is some issue, at least with trying 
to change the memlock limits.

So, before touching anything:

nas...@rey2:~$ ulimit -l
32
nas...@rey2:~$ ulimit -H -l
32

Note that this machine is an LDAP client for authentication via 
libpam-ldap. After adding these lines to an otherwise empty 
/etc/security/limits.conf:

*               hard    memlock         unlimited
*               soft    memlock         unlimited

and double checking that in the file /etc/pam.d/sshd is uncommented:

# Set up user limits from /etc/security/limits.conf.
session    required     pam_limits.so

I see no change either through a VNC terminal or just ssh'ing to the 
machine:

VNC TERMINAL
nas...@rey2:~$ su nasser
Password:
nas...@rey2:~$ ulimit -l
32
nas...@rey2:~$ ulimit -H -l
32

SSH DIRECTLY TO MACHINE
nas...@rey2:~$ ulimit -l
32
nas...@rey2:~$ ulimit -H -l
32

This is my first bug report and I am not an expert at this, but I cannot 
figure out what I am doing wrong, I do think there is a bug. I have also 
tried different limits in /etc/security/limits.conf:


*               hard    memlock         100
*               soft    memlock         50

which do not work. I tried this on my home machine, which does not use 
LDAP in any way, but is also an Intel machine, and it worked correctly. 
If I have left something out that is needed, please let me know.

Other info about the system:

Kernel: 2.6.26-2-amd64 #1 SMP
Using authentication via libpam-ldap 184-4.2

-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-modules depends on:
ii  debconf [debconf-2.0]     1.5.24         Debian configuration management sy
ii  libc6                     2.7-18         GNU C Library: Shared libraries
ii  libdb4.6                  4.6.21-11      Berkeley v4.6 Database Libraries [
ii  libpam0g                  1.0.1-5+lenny1 Pluggable Authentication Modules l
ii  libselinux1               2.0.65-5       SELinux shared libraries

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to