Package: libpam-modules
Version: 1.0.1-5+lenny1
The error appears in /var/log/auth.log, e.g.:
Nov 29 16:29:17 ldapc1 sshd[2130]: PAM unable to
dlopen(/lib/security/pam.deny.so): /lib/security/pam.deny.so: cannot
open shared object file: No such file or directory
Nov 29 16:29:17 ldapc1 sshd[2130]: PAM adding faulty module:
/lib/security/pam.deny.so
It occurs when attempting to login to a host using PAM in which
pam_deny.so has been enabled, e.g. by adding the line "account
required pam.deny.so" to the end of /etc/pam.d/common-account. It does
not prevent the user from logging in.
If ssh is used to connect to the host, e.g. with "ssh ldapc1 -l
ccolumbus", the will error show up in the log just after ssh connects,
but before the password can be submitted. If an attempt is made to
login at the console, the error will show up in the log as soon as the
username is submitted.
Obviously, these errors should not occur and it is reasonable to
suspect that, this way, the module may not work as expected.
An easy workaround for this error is to create a symbolic link, called
/lib/security/pam.deny.so, that points to /lib/security/pam_deny.so.
Versions used of the dependencies of the libpam-modules package:
debconf 1.5.24
debconf-i18n 1.5.24
libc6 2.7-18
libc6-i686 2.7-18
libdb4.6 4.6.21-11
libpam0g 1.0.1-5+lenny1
libselinux1 2.0.65-5
Version of the kernel used:
Linux ldapc1 2.6.26-2-686 #1 SMP Wed Nov 4 20:45:37 UTC 2009 i686 GNU/Linux
C library used: Version: 2.7-18
The host that this error was discovered on is a minimal Debian lenny
system (no GUI) installed on a VirtualBox (v.3.0.12) virtual machine.
It was being used to test an client configuration using OpenLDAP for
both authorization and authentication, which otherwise worked fine.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
