seems to mess up the pam for swat.
[root@host67 security]# rpm -qf /etc/pam.d/samba
samba-3.0.25b-1.el4_6.4
[root@host67 security]# cat /etc/pam.d/samba
#auth required /lib/security/pam_stack.so service=system-auth
#account required /lib/security/pam_stack.so service=system-auth
auth required pam_stack.so service=system-auth
account required pam_stack.so service=system-auth
and now it works
See below for debug/effort
==> /var/log/messages <==
Mar 24 09:50:58 host67 swat[26626]: PAM unable to dlopen(/lib/security/pam_stack.so)
Mar 24 09:50:58 host67 swat[26626]: PAM [dlerror: /lib/security/pam_stack.so: cannot open shared object file: No such file or directory]
Mar 24 09:50:58 host67 swat[26626]: PAM adding faulty module: /lib/security/pam_stack.so
Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0] auth/pampass.c:smb_pam_auth(534)
Mar 24 09:50:58 host67 swat[26626]: smb_pam_auth: PAM: UNKNOWN ERROR while authenticating user root
Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0] auth/pampass.c:smb_pam_passcheck(809)
Mar 24 09:50:58 host67 swat[26626]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root !
[root@host67 ~]# rpm -ql pam | grep stack
/lib64/security/pam_stack.so
/usr/share/doc/pam-0.77/txts/README.pam_stack
/usr/share/man/man8/pam_stack.8.gz
[root@host67 ~]# up2date --whatprovides /lib/security/pam_stack.so
pam-0.77-66.23.i386
[root@host67 ~]# rpm -q pam
pam-0.77-66.23
[root@host67 ~]# uname -a
Linux host67.1.internal.pdinc.us 2.6.9-55.0.2.ELsmp #1 SMP Tue Jun 26 14:14:47 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux
[root@host67 ~]# up2date -u pam
Fetching Obsoletes list for channel: centos4-Base...
Fetching Obsoletes list for channel: centos4-Updates...
Fetching Obsoletes list for channel: centos4-extras...
Fetching Obsoletes list for channel: centos4-addons...
Fetching rpm headers...
########################################
Name Version Rel
----------------------------------------------------------
All packages are currently up to date
[root@host67 ~]# up2date -u pam --arch=i386
Fetching Obsoletes list for channel: centos4-Base...
Fetching Obsoletes list for channel: centos4-Updates...
Fetching Obsoletes list for channel: centos4-extras...
Fetching Obsoletes list for channel: centos4-addons...
Fetching rpm headers...
########################################
Name Version Rel
----------------------------------------------------------
pam 0.77 66.23 i386
Testing package set / solving RPM inter-dependencies...
Downloading headers to solve dependencies...
#######################################
Downloading headers to solve dependencies...
########################################
audit-libs-1.0.15-3.el4_6.1 ########################## Done.
audit-libs-1.0.15-3.el4_6.1 ########################## Done.
cracklib-2.8.9-1.3.i386.rpm ########################## Done.
cracklib-2.8.9-1.3.i386.rpm ########################## Done.
glib2-2.4.7-1.i386.rpm: ########################## Done.
glib2-2.4.7-1.i386.rpm: ########################## Done.
pam-0.77-66.23.i386.rpm: ########################## Done.
pam-0.77-66.23.i386.rpm: ########################## Done.
cracklib-dicts-2.8.9-1.3.i3 ########################## Done.
cracklib-dicts-2.8.9-1.3.i3 ########################## Done.
Preparing ########################################### [100%]
Installing...
1:glib2 ########################################### [100%]
2:audit-libs ########################################### [100%]
3:cracklib ########################################### [100%]
4:cracklib-dicts ########################################### [100%]
5:pam ########################################### [100%]
The following packages were added to your selection to satisfy dependencies:
Name Version Release
--------------------------------------------------------------
audit-libs 1.0.15 3.el4_6.1
cracklib 2.8.9 1.3
glib2 2.4.7 1
cracklib-dicts 2.8.9 1.3
[root@host67 ~]# tail -f /var/log/messages
Mar 25 19:26:17 host67 swat[5003]: PAM unable to dlopen(/lib/security/pam_stack.so)
Mar 25 19:26:17 host67 swat[5003]: PAM [dlerror: /lib/security/pam_stack.so: cannot open shared object file: No such file or directory]
Mar 25 19:26:17 host67 swat[5003]: PAM adding faulty module: /lib/security/pam_stack.so
Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0] auth/pampass.c:smb_pam_auth(534)
Mar 25 19:26:17 host67 swat[5003]: smb_pam_auth: PAM: UNKNOWN ERROR while authenticating user root
Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0] auth/pampass.c:smb_pam_passcheck(809)
Mar 25 19:26:17 host67 swat[5003]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root !
[root@host67 ~]# dir /lib/security/pam_stack.so
-rwxr-xr-x 1 root root 10764 Nov 16 22:59 /lib/security/pam_stack.so
[root@host67 ~]# rpm -Vf /lib/security/pam_stack.so
S.5....T. c /etc/pam.d/system-auth
[root@host67 ~]# rpm -e glib2.i386 pam-0.77-66.23.i386
[root@host67 ~]# rpm -e audit-libs.i386
[root@host67 ~]# rpm -e cracklib.i386
[root@host67 ~]# rpm -e cracklib-dicts.i386
[root@host67 ~]#
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- -
- Jason Pyeron PD Inc. http://www.pdinc.us http://www.pdinc.us/ -
- Principal Consultant 10 West 24th Street #100 -
- +1 (443) 269-1555 x333 Baltimore, Maryland 21218 -
- -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately. Any other use of the email by you
is prohibited.
-
Jason Pyeron