Debian Bug report logs - #53570
login: no pam_sm_close_session call as root

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Mario Ambrogetti <mario@mario>

To: submit@bugs.debian.org

Subject: login: no pam_sm_close_session call as root

Date: Tue, 28 Dec 1999 00:00:57 +0100

Package: login
Version: 19990827-12
Severity: grave

I am writing a PAM module.  
I have found that the pam_sm_close_session doesn't come call with 
the user root but with the user of login 
Do I attach a my path.

-------------

--- login.c	Mon Dec 27 22:33:06 1999
+++ login.c.old	Mon Dec 27 22:32:11 1999
@@ -1162,6 +1162,13 @@
 	login_fbtab(tty, pwent.pw_uid, pwent.pw_gid);
 #endif
 
+#ifndef USE_PAM /* We call set_groups() above because this clobbers pam_groups.so */
+	if (setup_uid_gid(&pwent, is_console))
+#else
+	if (change_uid(&pwent))
+#endif
+		exit(1);
+
 #ifdef KERBEROS
 	if (clear_pass)
 		login_kerberos(username, clear_pass);
@@ -1275,14 +1282,6 @@
 	}
 	/* child */
 #endif
-
-#ifndef USE_PAM /* We call set_groups() above because this clobbers pam_groups.so */
-	if (setup_uid_gid(&pwent, is_console))
-#else
-	if (change_uid(&pwent))
-#endif
-		exit(1);
-
 	signal(SIGINT, SIG_DFL);	/* default interrupt signal */
 
 	endpwent();			/* stop access to password file */

-------------

-- System Information
Debian Release: potato
Kernel Version: Linux mario 2.2.13 #1 gio nov 4 20:35:20 CET 1999 i586 unknown

Versions of the packages login depends on:
ii  libc6           2.1.2-10       GNU C Library: Shared libraries and timezone
ii  libpam-modules  0.72-1         Pluggable Authentication Modules for PAM
ii  libpam0g        0.72-1         Pluggable Authentication Modules library

--- Begin /etc/login.defs (modified conffile)
#
#
#
#
#
#
#
MAIL_DIR        /var/spool/mail
#
#
FAIL_DELAY		3
#
#
FAILLOG_ENAB		yes
#
#
LOG_UNKFAIL_ENAB	no
#
#
LOG_OK_LOGINS		no
#
#
QUOTAS_ENAB		yes
#
#
SYSLOG_SU_ENAB		yes
SYSLOG_SG_ENAB		yes
#
#
#
#
#
#
FTMP_FILE	/var/log/btmp
#
#
SU_NAME		su
#
#
HUSHLOGIN_FILE	.hushlogin
#
#
NOLOGIN_STR	NOLOGIN
#
#
#
#
ENV_HZ		HZ=100
#
#
ENV_SUPATH	PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/bin/X11:/usr/local/sbin:/usr/local/bin
ENV_PATH	PATH=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
#
#
#
#
TTYGROUP	tty
TTYPERM		0600
#
#
#
#
#
ERASECHAR	0177
KILLCHAR	025
UMASK		022
#
#
#
PASS_MAX_DAYS	99999
PASS_MIN_DAYS	0
PASS_MIN_LEN	5
PASS_WARN_AGE	7
#
#
UID_MIN			 1000
UID_MAX			60000
#
#
GID_MIN			  100
GID_MAX			60000
#
#
LOGIN_RETRIES		5
#
#
LOGIN_TIMEOUT		60
#
#
PASS_MAX_LEN		8
#
#
CHFN_AUTH		yes
#
CHFN_RESTRICT		rwh
#
#
#
#
DEFAULT_HOME	yes
#
#
#
#
#
#
#
#
#
#
#
#
USERGROUPS_ENAB yes
#
#
#
#
CLOSE_SESSIONS yes
#
MD5_CRYPT_ENAB

--- End /etc/login.defs

--- Begin /etc/pam.d/login (modified conffile)
#
#
#
auth       requisite  pam_securetty.so
auth       required   pam_nologin.so
auth       required   pam_env.so
auth       sufficient pam_krb5_auth.so 
auth       required   pam_unix.so use_first_pass
account    required   pam_unix.so
session    required   pam_unix.so
session    optional   pam_lastlog.so
session    optional   pam_motd.so
session    optional   pam_mail.so standard noenv
#
password   required   pam_unix.so
#

--- End /etc/pam.d/login

--- Begin /etc/pam.d/su (modified conffile)
#
#
auth       sufficient pam_rootok.so
auth       required   pam_unix.so
account    required   pam_unix.so
session    required   pam_unix.so
session    required   pam_usergate.so pluto pippo paperino 

--- End /etc/pam.d/su

Message #10 received at 53570@bugs.debian.org (full text, mbox, reply):

From: Ben Collins <bcollins@debian.org>

To: Mario Ambrogetti <mario@mario.debian.org>, 53570@bugs.debian.org

Subject: Re: Bug#53570: login: no pam_sm_close_session call as root

Date: Mon, 27 Dec 1999 20:22:27 -0500

On Tue, Dec 28, 1999 at 12:00:57AM +0100, Mario Ambrogetti wrote:
> Package: login
> Version: 19990827-12
> Severity: grave
> 
> I am writing a PAM module.  
> I have found that the pam_sm_close_session doesn't come call with 
> the user root but with the user of login 
> Do I attach a my path.

I have no idea what you are talking about, and this patch has nothing to
do with close_session. If you want login to stay around till the session
is ended (logoff), then set CLOSE_SESSIONS to "yes" in /etc/login.defs
(this is documented).

Message #15 received at 53570-done@bugs.debian.org (full text, mbox, reply):

From: Ben Collins <bcollins@debian.org>

To: 53570-done@bugs.debian.org

Subject: this is not a bug

Date: Sat, 1 Jan 2000 22:22:18 -0500

Since the submitter gave no feedback and from what I understand this is
not really a bug, I am going to close it.

-- 
 -----------=======-=-======-=========-----------=====------------=-=------
/  Ben Collins  --  ...on that fantastic voyage...  --  Debian GNU/Linux   \
`     bcollins@debian.org  -  collinbm@djj.state.va.us  -  bmc@visi.net    '
 `---=========------=======-------------=-=-----=-===-======-------=--=---'

Send a report that this bug log contains spam.