[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netatalk
Subject:    Re: [Netatalk-admins] pam-error with 2.0.4
From:       Thomas Liesner <t.liesner () creativ-consulting ! de>
Date:       2009-08-21 9:10:07
Message-ID: 4A8E646F.2010307 () creativ-consulting ! de
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Hi,

my uams are in /usr/local/etc/netatalk/uams. A 'ldd 
/usr/local/etc/netatalk/uams/uams_dhx_pam.so'.
worked fine and showed libpam as well. While checking "config.log" i 
noticed the following:

> [root@kt-server netatalk-2.0.4]# cat config.log |grep pam
> configure:27692: result: yes (path: /etc/pam.d)
> configure:27733: checking security/pam_appl.h usability
> configure:27774: checking security/pam_appl.h presence
> configure:27837: checking for security/pam_appl.h
> configure:27733: checking pam/pam_appl.h usability
> conftest.c:160:26: pam/pam_appl.h: No such file or directory
> | #include <pam/pam_appl.h>
> configure:27774: checking pam/pam_appl.h presence
> conftest.c:127:26: pam/pam_appl.h: No such file or directory
> | #include <pam/pam_appl.h>
> configure:27837: checking for pam/pam_appl.h
> configure:27862: checking for pam_set_item in -lpam
> configure:27897: gcc -o conftest -g -O2   conftest.c -lpam   >&5
> configure:33460: result:         LIBS   =  -lpam
> ac_cv_header_pam_pam_appl_h=no
> ac_cv_header_security_pam_appl_h=yes
> ac_cv_lib_pam_pam_set_item=yes
> netatalk_cv_install_pam=yes
> netatalk_cv_use_pam=yes
> PAM_LIBS=' -lpam'
>   
After creating "/usr/lib/pam" as a symbolic link to "/usr/lib/security" 
configure found pam_appl.h:
> [root@kt-server netatalk-2.0.4]# cat config.log |grep pam
> configure:27692: result: yes (path: /etc/pam.d)
> configure:27733: checking security/pam_appl.h usability
> configure:27774: checking security/pam_appl.h presence
> configure:27837: checking for security/pam_appl.h
> configure:27733: checking pam/pam_appl.h usability
> configure:27774: checking pam/pam_appl.h presence
> configure:27837: checking for pam/pam_appl.h
> configure:27862: checking for pam_set_item in -lpam
> configure:27897: gcc -o conftest -g -O2   conftest.c -lpam   >&5
> configure:33460: result:         LIBS   =  -lpam
> ac_cv_header_pam_pam_appl_h=yes
> ac_cv_header_security_pam_appl_h=yes
> ac_cv_lib_pam_pam_set_item=yes
> netatalk_cv_install_pam=yes
> netatalk_cv_use_pam=yes
> PAM_LIBS=' -lpam'

I was not able to test this installation due to production issues at 
that day and have to wait until next week.
I hope i found the cause for this error.

Thanks,
Tom

Frank Lahm schrieb:
> 2009/8/13 Thomas Liesner <t.liesner@creativ-consulting.de>:
>   
>> Hi,
>>
>> i'm running a netatalk 2.0.3 server on FedoraCore 3 for the last couple of
>> years without bigger problems.
>> Yesterday i thought it would be a good idea to upgrade to 2.0.4. I
>> configured the sources in the same manner as i did with 2.0.3. The only
>> thing i chose was the redhat-buildstyle.
>> The sources compiled fine and all binaries installed fine.
>> Everything works as expected except pam.
>> When a user tries to connect, i get the following errors in the systemlog:
>>
>>     
>>> Aug 12 17:01:11 kt-server afpd[2485]: ASIP session:548(5) from
>>> 125.30.23.154:49258(8)
>>> Aug 12 17:01:11 kt-server afpd[2485]: dhx login: maier
>>> Aug 12 17:01:11 kt-server afpd[2485]: PAM unable to
>>> dlopen(/lib/security/pam_unix.so)
>>> Aug 12 17:01:11 kt-server afpd[2485]: PAM [dlerror:
>>> /lib/security/pam_unix.so:
>>> undefined symbol: pam_get_item]
>>> Aug 12 17:01:11 kt-server afpd[2485]: PAM adding faulty module:
>>> /lib/security/pam_unix.so
>>> Aug 12 17:01:11 kt-server afpd[2485]: uams_dhx_pam.c :PAM: PAM_Error:
>>> Module is
>>> unknown
>>>       
>> Do i have to install a newer version of pam?
>>     
>
> I guess not. Somehow configure probably didn't add the right linker
> flag to link libpam to the uam module.
>
> What does `ldd /etc/netatalk/uams/uams_dhx_pam.so` say ? Does it
> contain libpam like this:
> $ ldd /etc/netatalk/uams/uams_dhx_pam.so
> 	libcrypt.so.1 => /lib/tls/libcrypt.so.1 (0xb7fa8000)
> 	libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xb7e6d000)
> 	libpam.so.0 => /lib/libpam.so.0 (0xb7e65000)
> 	libc.so.6 => /lib/tls/libc.so.6 (0xb7d33000)
> 	libdl.so.2 => /lib/tls/libdl.so.2 (0xb7d2f000)
> 	libz.so.1 => /usr/lib/libz.so.1 (0xb7d1b000)
> 	/lib/ld-linux.so.2 (0xb7feb000)
>
> If this doesn't get you started, submit your config.log.
>
> -Frank
>   


-- 
------------------------------------------------------------------------

CreCon Creativ Consulting <http://www.creativ-consulting.de> 	*Thomas 
Liesner | Teamleiter IT*

Crecon Creativ Consulting GmbH | Christinenstraße 1 | D-40880 Ratingen
Fon: +49(0)2102.9396.20 | Fax: +49(0)2102.9396.66 | Mobile: +49(0)173.54 
45 778
t.liesner@creativ-consulting.de <mailto:t.liesner@creativ-consulting.de> 
| www.creativ-consulting.de <http://www.creativ-consulting.de>

making brands appear | www.vignold.de <http://www.vignold.de>

Member of PREVACO International | www.prevaco.com <http://www.prevaco.com>

------------------------------------------------------------------------

Geschäftsführer: Jörg Poplawsky
Registergericht: Amtsgericht Düsseldorf | Registernummer: HRB 44299
Sitz der Gesellschaft: Ratingen | Umsatzsteuer ID Nr.: DE 119886532



["smime.p7s" (application/x-pkcs7-signature)]

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july

_______________________________________________
Netatalk-admins mailing list
Netatalk-admins@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netatalk-admins


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic