Debian Bug report logs - #604705
PAM configuration syntax in /etc/pam.d/pwauth is not correct

version graph

Package: pwauth; Maintainer for pwauth is Hai Zaar <haizaar@haizaar.com>; Source for pwauth is src:pwauth.

Reported by: Samuel Byeongjun Park <byeongjun.park@case.edu>

Date: Tue, 23 Nov 2010 16:54:01 UTC

Severity: grave

Found in version pwauth/2.3.8-1

Done: Gaudenz Steinlin <gaudenz@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Hai Zaar <haizaar@haizaar.com>:
Bug#604705; Package pwauth. (Tue, 23 Nov 2010 16:54:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Samuel Byeongjun Park <byeongjun.park@case.edu>:
New Bug report received and forwarded. Copy sent to Hai Zaar <haizaar@haizaar.com>. (Tue, 23 Nov 2010 16:54:04 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Samuel Byeongjun Park <byeongjun.park@case.edu>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: PAM configuration syntax in /etc/pam.d/pwauth is not correct
Date: Tue, 23 Nov 2010 11:44:20 -0500
Package: pwauth
Version: 2.3.8-1
Severity: grave
Justification: renders package unusable


PAM configuration file for pwauth, /etc/pam.d/pwauth has an incorrect syntax.
Correct syntax is
  pam_succeed_if.so [FLAG] [CONDITION]
and the items in Condition, such as fields and operator shoulc be separated with a blank.
Therefore,
  auth required pam_succeed_if.so use_uid=www-data
or
  auth required pam_succeed_if.so use_uid user=www-data
is not working.
It should be like
  auth required pam_succeed_if.so use_uid user = www-data

Sam Park.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages pwauth depends on:
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  libpam0g                      1.1.1-6.1  Pluggable Authentication Modules l

Versions of packages pwauth recommends:
ii  libapache2-mod-authnz-externa 3.2.4-2    authenticate Apache against extern

pwauth suggests no packages.

-- Configuration Files:
/etc/pam.d/pwauth changed:
auth       requisite  pam_nologin.so
auth 	required	pam_succeed_if.so use_uid user = www-data
@include common-auth
@include common-account


-- no debconf information




Reply sent to Gaudenz Steinlin <gaudenz@debian.org>:
You have taken responsibility. (Sat, 27 Nov 2010 14:27:06 GMT) Full text and rfc822 format available.

Notification sent to Samuel Byeongjun Park <byeongjun.park@case.edu>:
Bug acknowledged by developer. (Sat, 27 Nov 2010 14:27:06 GMT) Full text and rfc822 format available.

Message #10 received at 604705-done@bugs.debian.org (full text, mbox):

From: Gaudenz Steinlin <gaudenz@debian.org>
To: 604705-done <604705-done@bugs.debian.org>
Subject: Please add more information to your pwauth bug report
Date: Sat, 27 Nov 2010 15:18:02 +0100
[Message part 1 (text/plain, inline)]
Hi Sam

I tried to reproduce the bug report you sent for the pwauth package,
but in a default install the file /etc/pam.d/pwauth does not contain
any of the lines you mention. I also tested if it works with apache
and the default pwauth config works out of the box (after appropriate
Apache configuration). Therefore I'm closing the bug for the moment. 

If you still think that there is a bug in the pwauth package, please
provide more information about what you are trying to do and your
exact setup. Feel free to reopen the bug in this case.

Gaudenz
-- 
Ever tried. Ever failed. No matter.
Try again. Fail again. Fail better.
~ Samuel Beckett ~
[signature.asc (application/pgp-signature, attachment)]

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 26 Dec 2010 07:32:02 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Apr 19 23:38:05 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.