Your message dated Thu, 19 May 2016 10:22:47 +0000
with message-id <e1b3l6n-0005ri...@franck.debian.org>
and subject line Bug#824657: fixed in libpam-abl 0.6.0-5
has caused the Debian Bug report #824657,
regarding libpam-abl: Fatal system lockout with libpam-abl installed
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
824657: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824657
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libpam-abl
Version: 0.6.0-4
Severity: critical
Justification: breaks the whole system
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
With latest version of libpam-abl, it is not possible to login to the system.
Regular users, root and all users over SSH fail to login. Only SSH key based
login works (and it not possible to sudo/su after that).
It appears the new package is installing the pam_abl.so module in the wrong
location (/usr/lib/security/) instead of earlier version's correct location
(/lib/<arch-triplet>/security). I suppose the multiarch patch that was removed
needs some work. There are quite a few reports from FreedomBox users regarding
this. It would be nice to have a quick resolution to this issue. The
following are the relevant logs:
fbx@freedombox-vm1:~$ su - fbx
Password:
su: Module is unknown
- From /var/log/auth.log
May 18 13:36:44 freedombox-vm1 su[17570]: PAM unable to dlopen(pam_abl.so):
/lib/security/pam_abl.so: cannot open shared object file: No such file or
directory
May 18 13:36:44 freedombox-vm1 su[17570]: PAM adding faulty module: pam_abl.so
May 18 13:36:50 freedombox-vm1 su[17570]: pam_authenticate: Module is unknown
May 18 13:36:50 freedombox-vm1 su[17570]: FAILED su for fbx by fbx
May 18 13:36:50 freedombox-vm1 su[17570]: - /dev/pts/2 fbx:fbx
May 18 13:39:01 freedombox-vm1 CRON[19526]: PAM unable to dlopen(pam_abl.so):
/lib/security/pam_abl.so: cannot open shared object file: No such file or
directory
May 18 13:39:01 freedombox-vm1 CRON[19526]: PAM adding faulty module:
pam_abl.so
- -- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf
Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Sjkl
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: libpam-abl
Source-Version: 0.6.0-5
We believe that the bug you reported is fixed in the latest version of
libpam-abl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 824...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexandre Mestiashvili <a...@biotec.tu-dresden.de> (supplier of updated
libpam-abl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 19 May 2016 10:27:30 +0200
Source: libpam-abl
Binary: libpam-abl
Architecture: source amd64
Version: 0.6.0-5
Distribution: unstable
Urgency: medium
Maintainer: Alexandre Mestiashvili <a...@biotec.tu-dresden.de>
Changed-By: Alexandre Mestiashvili <a...@biotec.tu-dresden.de>
Description:
libpam-abl - blocks hosts attempting a brute force attack
Closes: 824657
Changes:
libpam-abl (0.6.0-5) unstable; urgency=medium
.
* Revert commit breaking multiarch support, Closes: #824657
Checksums-Sha1:
45289cbc29e939d97f51648ff48db42dd813a59e 1922 libpam-abl_0.6.0-5.dsc
8afb1223c0756a4ba4feb65357b58a1cf33a9af2 5392 libpam-abl_0.6.0-5.debian.tar.xz
1af54356473c47daa39029cd8a7321d2c0d80aa2 155736
libpam-abl-dbgsym_0.6.0-5_amd64.deb
7e981439be0b8868d59778bedd4f11b62bc08d35 41686 libpam-abl_0.6.0-5_amd64.deb
Checksums-Sha256:
ec4473c03c24f5c08fb5fe136f9485de8ea9e989bea3fac0fbc0efa1c0479d93 1922
libpam-abl_0.6.0-5.dsc
9183340c0ea09f8e4e8ff4fa3ca6b6f95a13c35e70dd002271581235f22dfcd5 5392
libpam-abl_0.6.0-5.debian.tar.xz
6e1aedfebc3bf9939d4b096f45bad7d9325d667c27c7c87e565dbb9d27c5c659 155736
libpam-abl-dbgsym_0.6.0-5_amd64.deb
6edc83f5885374ee369e35a114a7e69b8120bb199c5e1f9d71738867e16f1845 41686
libpam-abl_0.6.0-5_amd64.deb
Files:
a11aed91165a28a0c7502844933e93e5 1922 admin extra libpam-abl_0.6.0-5.dsc
83255b4719140719433aa282bec2c9d2 5392 admin extra
libpam-abl_0.6.0-5.debian.tar.xz
0973be191af5b50cd7e60272e9000256 155736 debug extra
libpam-abl-dbgsym_0.6.0-5_amd64.deb
c24e46c4a331a6ea4cd1c054dc633df5 41686 admin extra libpam-abl_0.6.0-5_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=ok3M
-----END PGP SIGNATURE-----
--- End Message ---
