Yesterday I installed pam_shield and followed the testing suggested and thought all was well. today I find that I cannot get to my email account, I can login via ssh okay (uses keys) but su and sudo give segmentation faults. I am guessing due to the pam module causing a problem. As I cannot do remote login as root and sudo and su use pam I appear to have locked myself out. Any words of wisdom from those a little more knowledgeable? Why do I keep trying new things - I like to improve my system and harden it against constant script kiddies (many different triers per day), but despite reading all the instructions I fall into a hole I cannot climb out of. Hopefully someone has an idea BTW - the console also fails to allow login TIA Rob -------------- next part -------------- A non-text attachment was scrubbed... Name: rkampen.vcf Type: text/x-vcard Size: 197 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20100824/aec3067a/attachment-0002.vcf>
On Tue, August 24, 2010 17:29, Rob Kampen wrote:> Yesterday I installed pam_shield and followed the testing suggested and > thought all was well. > today I find that I cannot get to my email account, I can login via ssh > okay (uses keys) but su and sudo give > segmentation faults. I am guessing due to the pam module causing a > problem. > ... > BTW - the console also fails to allow login > TIA Rob >You'll need to boot into Single User Mode and undo or just check your pam configuration: From: http://www.centos.org/docs/5/html/Installation_Guide-en-US/s1-rescuemode-booting-single.html At the GRUB splash screen at boot time, press any key to enter the GRUB interactive menu. Select Red Hat Enterprise Linux with the version of the kernel that you wish to boot and type a to append the line. Go to the end of the line and type single as a separate word (press the Spacebar and then type single). Press Enter to exit edit mode.
> Yesterday I installed pam_shield and followed the testing suggested and > thought all was well. > today I find that I cannot get to my email account, I can login via ssh > okay (uses keys) but su and sudo give > segmentation faults. I am guessing due to the pam module causing a problem. > As I cannot do remote login as root and sudo and su use pam I appear to > have locked myself out.Same here. Is it a 64-bit system? # cat /var/log/messages | grep -i segfault Aug 24 06:41:18 angara kernel: login[1678]: segfault at 0000000000000000 rip 0000003816a79f34 rsp 00007fff0663cce8 error 4 Aug 24 06:41:21 angara kernel: login[1708]: segfault at 0000000000000000 rip 0000003816a79f34 rsp 00007fff66c609b8 error 4 Aug 24 06:46:45 angara kernel: login[5933]: segfault at 0000000000000000 rip 0000003816a79f34 rsp 00007fffc003eb38 error 4 Would the maintainer care to give a hand? Thanks, Sasha
On Tue, 24 Aug 2010, Rob Kampen wrote:> Yesterday I installed pam_shield and followed the testing suggested and > thought all was well. > today I find that I cannot get to my email account, I can login via ssh okay > (uses keys) but su and sudo give > segmentation faults. I am guessing due to the pam module causing a problem. > As I cannot do remote login as root and sudo and su use pam I appear to have > locked myself out.I have not encountered this issue. And I have been using it on 32bit and 64bit machines with RHEL4 and RHEL5. I guess it must be related to a configuration issue somewhere. Not good though. Was this with the 0.9.2 release, or the 0.9.3 release ? Please provide this information to the author, he might help you find the cause and fix it in pam_shield. Thanks for reporting, -- -- dag wieers, dag at wieers.com, http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors]