On 07/02/2012 12:55 PM, Arno Gaboury wrote:

Dear list,

my system is no more running smooth after yesterday bunch of
upgrades. The box has very classic and standard settings, and
regularly upgraded.


The symptoms:
-when login in runlevel 3, the password prompt appears twice
-after starx (XFCE4), all my previous open windows (Firefox,
thunderbirds,clementine) take age ( 3-4 mn to display the contents).
-Thunderbird return invalid password to mail server, please retry. I
clic on retry, then it starts.


I suspects there is a misconfiguration in my new */etc/pam.d/login*
file, and some authentification issues (se below *auth.log*)



Please find below my *pacman log:*

[2012-07-01 15:29] Running 'pacman -Syu --ignoregroup texlive-most
--ignore texlive-bin'

.........
[2012-07-01 15:30] ==> Warning: /etc/group or /etc/gshadow are
inconsistent.

[2012-07-01 15:30] Run 'grpck' to correct this.
[2012-07-01 15:30] upgraded shadow (4.1.5-4 -> 4.1.5.1-1)
[2012-07-01 15:30] warning: /etc/pam.d/login installed as
/etc/pam.d/login.pacnew

......



I am not sure to have merged correctly my */etc/pam.d/login* with the
new login.pacnew

Please find below my */etc/pam.d/login*


#%PAM-1.0
auth required pam_securetty.so
auth requisite pam_nologin.so
auth include system-local-login
auth required pam_unix.so nullok
auth required pam_tally.so onerr=succeed file=/var/log/faillog
# use this to lockout accounts for 10 minutes after 3 failed attempts
#auth required pam_tally.so deny=2 unlock_time=600
onerr=succeed file=/var/log/faillog

account include system-local-login
account required pam_access.so
account required pam_time.so
account required pam_unix.so
#password required pam_cracklib.so difok=2 minlen=8 dcredit=2
ocredit=2 retry=3

#password required pam_unix.so sha512 shadow use_authtok
session include system-local-login
session required pam_unix.so
session required pam_env.so
session required pam_motd.so
session required pam_limits.so
session optional pam_mail.so dir=/var/spool/mail standard
session optional pam_lastlog.so
session optional pam_loginuid.so
-session optional pam_ck_connector.so nox11
-session optional pam_systemd.so



Feom */etc/rc.conf *:

DAEMONS=(ntpd syslog-ng netfs sshd crond dbus networkmanager
avahi-daemon libvirtd)

Nothing special in *kernel.log*.

TY for your help.

EDIT : Please find below *auth.log*. as it seems there is an issue it
it in last lines.:


Jul 2 12:33:45 localhost polkitd(authority=local): Operator of
unix-session:/org/freedesktop/ConsoleKit/Session2 successfully
authenticated as unix-user:gabx to gain TEMPORARY authorization for
action org.freedesktop.udisks2.filesystem-mount-system for
system-bus-name::1.14 [/usr/lib/gvfs/gvfs-udisks2-volume-monitor]
(owned by unix-user:gabx)
Jul 2 12:34:46 localhost polkitd(authority=local): Unregistered
Authentication Agent for
unix-session:/org/freedesktop/ConsoleKit/Session2 (system bus name
:1.27, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale
en_US.UTF-8) (disconnected from bus)
Jul 2 12:34:48 localhost login: pam_unix(login:session): session
closed for user gabx
Jul 2 12:34:48 localhost login: pam_unix(login:session): session
closed for user gabx
Jul 2 12:34:48 localhost login: pam_mail(login:session): pam_putenv:
delete non-existent entry; MAIL

Jul 2 12:34:49 localhost sshd[522]: Received signal 15; terminating.
Jul 2 12:35:23 localhost sshd[513]: Server listening on 0.0.0.0 port
755.

Jul 2 12:35:23 localhost sshd[513]: Server listening on :: port 755.
Jul 2 12:35:38 localhost login: pam_unix(login:session): session
opened for user gabx by LOGIN(uid=0)
Jul 2 12:35:38 localhost login: pam_unix(login:session): session
opened for user gabx by LOGIN(uid=0)

Jul 2 12:35:39 localhost login: LOGIN ON tty1 BY gabx
Jul 2 12:35:59 localhost polkitd(authority=local): Registered
Authentication Agent for
unix-session:/org/freedesktop/ConsoleKit/Session2 (system bus name
:1.27 [/usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1],
object path /org/gnome/PolicyKit1/AuthenticationAgent, locale
en_US.UTF-8)





After enquiring a litle bit, I got the feeling all my issues were due to
a wrong */etc/palm.d/login* after yesterday upgrade of *shadow* and
merging login with login.pacnew.

I removed these lines from *login* file I added after the upgrade:

auth requisite pam_nologin.so
auth include system-local-login
account include system-local-login
session include system-local-login


Now there is no more issues, but I wonder if not adding these lines, as
suggested by login.pacnew, makes my system instable?