Re: Segfault PAM

Marcus Meissner <[email protected]> Tue, 26 Nov 2013 13:58:37 +0100
Newsgroups gmane.linux.suse.ppc
Organization SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer, HRB 16746 (AG Nuernberg)
Message-ID <[email protected]>
On Tue, Nov 26, 2013 at 01:50:10PM +0100, Hans Scheffers wrote:
> Hi
> 
> We installed OpenSuSE 13.1 on a P710 partitiont, and would like to connect using our AD using kerberos tickets.
> 
> I got the AD authentication working, and can login as AD user, but when i try to su to another account, the system gives me a Memory Fault, var log messages:
> 
> kernel: sudo[4538]: unhandled signal 11 at 0000000000000000 nip 0000000000000000 lr 00001fffff2258c8 code 30001
> 
> we have changed 4 pam configuration files:
> 
> common-account-pc-ldap
> account sufficient      pam_krb5.so
> account sufficient      pam_ldap.so
> account required        pam_unix2.so
> 
> common-auth-pc-ldap
> auth    sufficient      pam_unix2.so
> auth    required        pam_env.so
> auth    sufficient      pam_krb5.so
> auth    sufficient      pam_ldap.so use_first_pass
> auth    required        pam_deny.so
> 
> common-password-pc-ldap
> password required       pam_pwcheck.so  nullok cracklib remember=4
> password required       pam_unix2.so    nullok use_authtok
> password required       pam_cracklib.so dcredit=-1 minlen=7 lcredit=-1 ocredit=-1 ucredit=-1
> password optional       pam_krb5.so
> password required       pam_ldap.so use_authtok md5
> password required       pam_deny.so
> 
> common-session-pc-ldap
> session optional        pam_krb5.so minimum_uid=1000
> session required        pam_limits.so
> session required        pam_unix2.so
> session optional        pam_umask.so
> 
> ldd of thes libraries doesn't show any problems, the same configuration does work well on a x86 based OpenSuSE setup (also 64 bit)
> 
> Is this a known bug, or am i doing something wrong? what extra info is needed for a helpful answer ;)

I saw something similar, which might be related to openssl. Can you get a backtrace?

Ciao, Marcus
-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]