Bug#308868: openssh pam built with pthread support breaks pam_afs.so
Package: ssh
Version: 1:3.8.1p1-8.sarge.4
Severity: normal
It seems the fix for bug #278394 -- compiling ssh with pthreads --
breaks the pam_afs.so pam module from openafs.
I have no idea why, but in the binary package (and if I download the
latest source and compile it) I get an sshd binary that just wont
accept any afs passwords. I do get the "AFS Password:" prompt,
indicating that the pam module is invoked correctly, but, as I said, it
just don't accept the right password and acts like if I typed an
incorrect password.
However, if I in the source package remove the fix for bug #278394 from
debian/rules; that is; In debian/rules I simply remove the line
perl -pi -e 's/^(LIBPAM=.*)/$$1 -pthread/' build-deb/Makefile
and remove the
-DUSE_POSIX_THREADS
flag from the make-line that follows; I do get a sshd that work exactly
as expected.
I currently have two home-built packages, one built with pthreads and
the other without it. I can swap back and forth between them and each
time I see the exact same behavior -- when running "with pthreads" no
passwords are accepted, when running "without pthreads" everything
works.
I can understand if compability with pam_afs.so isn't regarded *that*
important, but I suppose there is a possibilty that this can be
responsible for breaking other pam modules too; see for example bug
#240506 (ldap problems).
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (900, 'testing'), (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages ssh depends on:
ii adduser 3.63 Add and remove users and groups
ii debconf 1.4.30.13 Debian configuration management sy
ii dpkg 1.10.27 Package maintenance system for Deb
ii libc6 2.3.2.ds1-21 GNU C Library: Shared libraries an
ii libpam-modules 0.76-22 Pluggable Authentication Modules f
ii libpam-runtime 0.76-22 Runtime support for the PAM librar
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii libwrap0 7.6.dbs-8 Wietse Venema's TCP wrappers libra
ii zlib1g 1:1.2.2-4 compression library - runtime
-- debconf information excluded
Reply to: