Re: Segfault PAM

Hans Scheffers <[email protected]> Tue, 26 Nov 2013 19:32:53 +0100
Newsgroups gmane.linux.suse.ppc
Message-ID <[email protected]>
Hi  Markus,

How should i do that?
Hans Scheffers



> On 26 nov. 2013, at 13:58, "Marcus Meissner" <[email protected]> wrote:
> 
>> On Tue, Nov 26, 2013 at 01:50:10PM +0100, Hans Scheffers wrote:
>> Hi
>> 
>> We installed OpenSuSE 13.1 on a P710 partitiont, and would like to connect using our AD using kerberos tickets.
>> 
>> I got the AD authentication working, and can login as AD user, but when i try to su to another account, the system gives me a Memory Fault, var log messages:
>> 
>> kernel: sudo[4538]: unhandled signal 11 at 0000000000000000 nip 0000000000000000 lr 00001fffff2258c8 code 30001
>> 
>> we have changed 4 pam configuration files:
>> 
>> common-account-pc-ldap
>> account sufficient      pam_krb5.so
>> account sufficient      pam_ldap.so
>> account required        pam_unix2.so
>> 
>> common-auth-pc-ldap
>> auth    sufficient      pam_unix2.so
>> auth    required        pam_env.so
>> auth    sufficient      pam_krb5.so
>> auth    sufficient      pam_ldap.so use_first_pass
>> auth    required        pam_deny.so
>> 
>> common-password-pc-ldap
>> password required       pam_pwcheck.so  nullok cracklib remember=4
>> password required       pam_unix2.so    nullok use_authtok
>> password required       pam_cracklib.so dcredit=-1 minlen=7 lcredit=-1 ocredit=-1 ucredit=-1
>> password optional       pam_krb5.so
>> password required       pam_ldap.so use_authtok md5
>> password required       pam_deny.so
>> 
>> common-session-pc-ldap
>> session optional        pam_krb5.so minimum_uid=1000
>> session required        pam_limits.so
>> session required        pam_unix2.so
>> session optional        pam_umask.so
>> 
>> ldd of thes libraries doesn't show any problems, the same configuration does work well on a x86 based OpenSuSE setup (also 64 bit)
>> 
>> Is this a known bug, or am i doing something wrong? what extra info is needed for a helpful answer ;)
> 
> I saw something similar, which might be related to openssl. Can you get a backtrace?
> 
> Ciao, Marcus
> -- 
> To unsubscribe, e-mail: [email protected]
> To contact the owner, e-mail: [email protected]
> 
-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]