seems to mess up the pam for swat.
[root at host67 security]# rpm -qf /etc/pam.d/samba
samba-3.0.25b-1.el4_6.4
[root at host67 security]# cat /etc/pam.d/samba
#auth required /lib/security/pam_stack.so service=system-auth
#account required /lib/security/pam_stack.so
service=system-auth
auth required pam_stack.so service=system-auth
account required pam_stack.so service=system-auth
and now it works
See below for debug/effort
==> /var/log/messages <=
Mar 24 09:50:58 host67 swat[26626]: PAM unable to
dlopen(/lib/security/pam_stack.so)
Mar 24 09:50:58 host67 swat[26626]: PAM [dlerror:
/lib/security/pam_stack.so: cannot open shared object file: No such file or
directory]
Mar 24 09:50:58 host67 swat[26626]: PAM adding faulty module:
/lib/security/pam_stack.so
Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0]
auth/pampass.c:smb_pam_auth(534)
Mar 24 09:50:58 host67 swat[26626]: smb_pam_auth: PAM: UNKNOWN ERROR while
authenticating user root
Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0]
auth/pampass.c:smb_pam_passcheck(809)
Mar 24 09:50:58 host67 swat[26626]: smb_pam_passcheck: PAM: smb_pam_auth
failed - Rejecting User root !
[root at host67 ~]# rpm -ql pam | grep stack
/lib64/security/pam_stack.so
/usr/share/doc/pam-0.77/txts/README.pam_stack
/usr/share/man/man8/pam_stack.8.gz
[root at host67 ~]# up2date --whatprovides /lib/security/pam_stack.so
pam-0.77-66.23.i386
[root at host67 ~]# rpm -q pam
pam-0.77-66.23
[root at host67 ~]# uname -a
Linux host67.1.internal.pdinc.us 2.6.9-55.0.2.ELsmp #1 SMP Tue Jun 26
14:14:47 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux
[root at host67 ~]# up2date -u pam
Fetching Obsoletes list for channel: centos4-Base...
Fetching Obsoletes list for channel: centos4-Updates...
Fetching Obsoletes list for channel: centos4-extras...
Fetching Obsoletes list for channel: centos4-addons...
Fetching rpm headers...
########################################
Name Version Rel
----------------------------------------------------------
All packages are currently up to date
[root at host67 ~]# up2date -u pam --arch=i386
Fetching Obsoletes list for channel: centos4-Base...
Fetching Obsoletes list for channel: centos4-Updates...
Fetching Obsoletes list for channel: centos4-extras...
Fetching Obsoletes list for channel: centos4-addons...
Fetching rpm headers...
########################################
Name Version Rel
----------------------------------------------------------
pam 0.77 66.23
i386
Testing package set / solving RPM inter-dependencies...
Downloading headers to solve dependencies...
#######################################
Downloading headers to solve dependencies...
########################################
audit-libs-1.0.15-3.el4_6.1 ########################## Done.
audit-libs-1.0.15-3.el4_6.1 ########################## Done.
cracklib-2.8.9-1.3.i386.rpm ########################## Done.
cracklib-2.8.9-1.3.i386.rpm ########################## Done.
glib2-2.4.7-1.i386.rpm: ########################## Done.
glib2-2.4.7-1.i386.rpm: ########################## Done.
pam-0.77-66.23.i386.rpm: ########################## Done.
pam-0.77-66.23.i386.rpm: ########################## Done.
cracklib-dicts-2.8.9-1.3.i3 ########################## Done.
cracklib-dicts-2.8.9-1.3.i3 ########################## Done.
Preparing ########################################### [100%]
Installing...
1:glib2 ###########################################
[100%]
2:audit-libs ###########################################
[100%]
3:cracklib ###########################################
[100%]
4:cracklib-dicts ###########################################
[100%]
5:pam ###########################################
[100%]
The following packages were added to your selection to satisfy dependencies:
Name Version Release
--------------------------------------------------------------
audit-libs 1.0.15 3.el4_6.1
cracklib 2.8.9 1.3
glib2 2.4.7 1
cracklib-dicts 2.8.9 1.3
[root at host67 ~]# tail -f /var/log/messages
Mar 25 19:26:17 host67 swat[5003]: PAM unable to
dlopen(/lib/security/pam_stack.so)
Mar 25 19:26:17 host67 swat[5003]: PAM [dlerror: /lib/security/pam_stack.so:
cannot open shared object file: No such file or directory]
Mar 25 19:26:17 host67 swat[5003]: PAM adding faulty module:
/lib/security/pam_stack.so
Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0]
auth/pampass.c:smb_pam_auth(534)
Mar 25 19:26:17 host67 swat[5003]: smb_pam_auth: PAM: UNKNOWN ERROR while
authenticating user root
Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0]
auth/pampass.c:smb_pam_passcheck(809)
Mar 25 19:26:17 host67 swat[5003]: smb_pam_passcheck: PAM: smb_pam_auth
failed - Rejecting User root !
[root at host67 ~]# dir /lib/security/pam_stack.so
-rwxr-xr-x 1 root root 10764 Nov 16 22:59 /lib/security/pam_stack.so
[root at host67 ~]# rpm -Vf /lib/security/pam_stack.so
S.5....T. c /etc/pam.d/system-auth
[root at host67 ~]# rpm -e glib2.i386 pam-0.77-66.23.i386
[root at host67 ~]# rpm -e audit-libs.i386
[root at host67 ~]# rpm -e cracklib.i386
[root at host67 ~]# rpm -e cracklib-dicts.i386
[root at host67 ~]#
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- -
- Jason Pyeron PD Inc. http://www.pdinc.us
<http://www.pdinc.us/> -
- Principal Consultant 10 West 24th Street #100 -
- +1 (443) 269-1555 x333 Baltimore, Maryland 21218 -
- -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately. Any other use of the email by you
is prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20080325/efc47a2f/attachment-0001.html>
