** Description changed:

  ===========================================================
  SRU Justification:
  1. Impact: imap fails
  2. Development fix: add -lpam to LDLIBS
  3. Stable fix: same as development fix
  4. Test case:
-    a. install libcap2-bin (apt-get install libcap2-bin)
-    b. add an entry to /etc/security/capabilities.conf for a user, before the 
'none *' entry, i.e.
-        cap_dac_override serge
-    c. install courier-imap-ssl and mutt (apt-get install courier-imap-ssl 
mutt)
-    d. as user serge, create '~/Maildir' (mkdir ~/Maildir)
-    d. reboot, and try to connect with mutt to localhost
-       mutt -f imap://serge@localhost/
-    e. without the fix, mutt will fail to connect, and /var/log/auth.log will 
have an entry like:
-       Nov  8 12:19:05 l-libcap authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
+    a. install libcap2-bin (apt-get install libcap2-bin)
+    b. add an entry to /etc/security/capabilities.conf for a user, before the 
'none *' entry, i.e.
+        cap_dac_override serge
+    c. install courier-imap-ssl and mutt (apt-get install courier-imap-ssl 
mutt)
+    d. as user serge, create '~/Maildir' (maildirmake ~/Maildir)
+    d. reboot, and try to connect with mutt to localhost
+       mutt -f imap://serge@localhost/
+    e. without the fix, mutt will fail to connect, and /var/log/auth.log will 
have an entry like:
+       Nov  8 12:19:05 l-libcap authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
  5. Regression potential: this is in use in debian and oneiric/precise, and 
should cause no issues.
  ===========================================================
  Binary package hint: libcap2
  
  Each time i login (using evolution) on my IMAP server (courier-imap-
  ssl), the server auth.log shows:
  
  May 19 11:50:35 srv authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
  May 19 11:50:35 srv authdaemond: PAM adding faulty module: 
/lib/security/pam_cap.so
  
  it happens only at LOGIN time.
  May 19 11:50:35 srv imapd-ssl: LOGIN, user=foo, ip=[::ffff:x.x.x.x], 
port=[xxxxx], protocol=IMAP
  
  $ objdump -T /lib/security/pam_cap.so | grep pam_get_item
  0000000000000000      D  *UND*  0000000000000000              pam_get_item
  
  both the client & server are running Lucid and are up-to-date.
  
  ii  libcap2-bin                                           1:2.17-2ubuntu1
  ii  courier-authdaemon                                0.62.4-1
  ii  courier-imap-ssl                                  4.6.0-2.1ubuntu1
  ii  courier-ssl                                       0.63.0-2.1ubuntu1

** Description changed:

  ===========================================================
  SRU Justification:
  1. Impact: imap fails
  2. Development fix: add -lpam to LDLIBS
  3. Stable fix: same as development fix
  4. Test case:
     a. install libcap2-bin (apt-get install libcap2-bin)
     b. add an entry to /etc/security/capabilities.conf for a user, before the 
'none *' entry, i.e.
         cap_dac_override serge
     c. install courier-imap-ssl and mutt (apt-get install courier-imap-ssl 
mutt)
     d. as user serge, create '~/Maildir' (maildirmake ~/Maildir)
     d. reboot, and try to connect with mutt to localhost
        mutt -f imap://serge@localhost/
-    e. without the fix, mutt will fail to connect, and /var/log/auth.log will 
have an entry like:
-       Nov  8 12:19:05 l-libcap authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
+    e. without the fix, /var/log/auth.log will have an entry like:
+       Nov  8 13:12:46 l-libcap authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
+       Nov  8 13:12:46 l-libcap authdaemond: PAM adding faulty module: 
/lib/security/pam_cap.so
  5. Regression potential: this is in use in debian and oneiric/precise, and 
should cause no issues.
  ===========================================================
  Binary package hint: libcap2
  
  Each time i login (using evolution) on my IMAP server (courier-imap-
  ssl), the server auth.log shows:
  
  May 19 11:50:35 srv authdaemond: PAM unable to 
dlopen(/lib/security/pam_cap.so): /lib/security/pam_cap.so: undefined symbol: 
pam_get_item
  May 19 11:50:35 srv authdaemond: PAM adding faulty module: 
/lib/security/pam_cap.so
  
  it happens only at LOGIN time.
  May 19 11:50:35 srv imapd-ssl: LOGIN, user=foo, ip=[::ffff:x.x.x.x], 
port=[xxxxx], protocol=IMAP
  
  $ objdump -T /lib/security/pam_cap.so | grep pam_get_item
  0000000000000000      D  *UND*  0000000000000000              pam_get_item
  
  both the client & server are running Lucid and are up-to-date.
  
  ii  libcap2-bin                                           1:2.17-2ubuntu1
  ii  courier-authdaemon                                0.62.4-1
  ii  courier-imap-ssl                                  4.6.0-2.1ubuntu1
  ii  courier-ssl                                       0.63.0-2.1ubuntu1

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/582769

Title:
  /lib/security/pam_cap.so: undefined symbol: pam_get_item

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcap2/+bug/582769/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to