FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Gentoo > Gentoo User

 
 
LinkBack Thread Tools
 
Old 04-19-2012, 07:46 PM
Neil Bothwick
 
Default pambase/shadow warning

I upgraded to sys-auth/pambase-20120417 and sys-apps/shadow-4.1.5-r1 and
found I couldn't login to a new session or use su. Rebooting only made
the problem permanent, I had to SSH in to revert to
sys-auth/pambase-20101024-r2 and sys-apps/shadow-4.1.5.

I've not had a chance to find the full cause, but thought I'd post a
warning to postpone this upgrade until you have time for the traditional
~arch dance.


--
Neil Bothwick

"Logic will get you from A to B. Imagination will take you everywhere."
(Albert Einstein)
 
Old 04-19-2012, 07:57 PM
Nikos Chantziaras
 
Default pambase/shadow warning

On 19/04/12 22:46, Neil Bothwick wrote:

I upgraded to sys-auth/pambase-20120417 and sys-apps/shadow-4.1.5-r1 and
found I couldn't login to a new session or use su. Rebooting only made
the problem permanent, I had to SSH in to revert to
sys-auth/pambase-20101024-r2 and sys-apps/shadow-4.1.5.

I've not had a chance to find the full cause, but thought I'd post a
warning to postpone this upgrade until you have time for the traditional
~arch dance.


Good thing I don't have pambase installed :-P
 
Old 04-19-2012, 08:58 PM
walt
 
Default pambase/shadow warning

On 04/19/2012 12:46 PM, Neil Bothwick wrote:
> I upgraded to sys-auth/pambase-20120417 and sys-apps/shadow-4.1.5-r1 and
> found I couldn't login to a new session or use su. Rebooting only made
> the problem permanent, I had to SSH in to revert to
> sys-auth/pambase-20101024-r2 and sys-apps/shadow-4.1.5.

I've never been clear on how ssh authenticates a new login. Why would
your ssh login be accepted? Did you ssh in as a user and su to root?

Anyway, just as another data point I did the same update today and have
no trouble logging in. Here are my useflags for comparison

Installed versions: 20120417!b(03:40:29 AM 04/19/2012)(consolekit cracklib
gnome-keyring pam_ssh sha512 -debug -minimal -mktemp -pam_krb5 -passwdqc -selinux)

Installed versions: 4.1.5-r1(03:41:02 AM 04/19/2012)(acl cracklib pam -audit
-nls -selinux -skey -tcb -xattr)

(The pam_ssh useflag allows me to log in with my ssh passphrase instead of my
password, but that doesn't apply to the root account.)
 
Old 04-19-2012, 09:47 PM
Neil Bothwick
 
Default pambase/shadow warning

On Thu, 19 Apr 2012 22:57:45 +0300, Nikos Chantziaras wrote:

> Good thing I don't have pambase installed :-P

This is a recent build, so I thought I'd come out of the stone age and
try using pam. That cave looks rather inviting right now...


--
Neil Bothwick

- We are but packets in the internet of Life-
 
Old 04-19-2012, 09:51 PM
Neil Bothwick
 
Default pambase/shadow warning

On Thu, 19 Apr 2012 13:58:42 -0700, walt wrote:

> > I upgraded to sys-auth/pambase-20120417 and sys-apps/shadow-4.1.5-r1
> > and found I couldn't login to a new session or use su. Rebooting only
> > made the problem permanent, I had to SSH in to revert to
> > sys-auth/pambase-20101024-r2 and sys-apps/shadow-4.1.5.
>
> I've never been clear on how ssh authenticates a new login. Why would
> your ssh login be accepted? Did you ssh in as a user and su to root?

That would have failed on su. It works because I have key authentication
for SSH. Otherwise I'd have been screwed.

> Anyway, just as another data point I did the same update today and have
> no trouble logging in. Here are my useflags for comparison

> Installed versions: 20120417!b(03:40:29 AM 04/19/2012)(consolekit
> cracklib gnome-keyring pam_ssh sha512 -debug -minimal -mktemp -pam_krb5
> -passwdqc -selinux)
>
> Installed versions: 4.1.5-r1(03:41:02 AM 04/19/2012)(acl cracklib pam
> -audit -nls -selinux -skey -tcb -xattr)

Mine are the same except for gnome-keyring - I use KDE.


--
Neil Bothwick

The sergeant walked into the shower and caught me giving myself a
dishonorable discharge. Without missing a beat, I said, "It's my dick
and I can wash it as fast as I want!"
 
Old 04-19-2012, 09:54 PM
Nikos Chantziaras
 
Default pambase/shadow warning

On 20/04/12 00:47, Neil Bothwick wrote:

On Thu, 19 Apr 2012 22:57:45 +0300, Nikos Chantziaras wrote:


Good thing I don't have pambase installed :-P


This is a recent build, so I thought I'd come out of the stone age and
try using pam. That cave looks rather inviting right now...


When I initially installed Gentoo, PAM was also installed. I only
removed it later because I just couldn't understand why I need it in the
first place. I realized that I don't have *any* use for it whatsoever,
so in the true spirit of Gentoo, I disabled that USE flag and did a
world update. I don't feel like living in the cave. I feel like I got
rid of something I had no use for to begin with.
 

Thread Tools




All times are GMT. The time now is 05:58 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org