[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Debian Trixie: Nested Logins Always Failing



Dear all:

Starting with Debian Trixie launching the `login' command within a running terminal session simply terminates the running session. With previous Debian OS versions this weird behavior never occurred anyway. I just tested on a fresh and up to date Debian Trixie Desktop installation. It does not matter in which exact way I launch the terminal session (getty, pts, ssh).
Find attached the relevant output of useful system log information (debug level) and additionally a system call trace generated on behalf of the `strace' tool.


System log says:


Oct 06 14:29:08 debian login[6553]: FAILED LOGIN 1 FROM pts/2 FOR user, Authentication failure
Oct 06 14:29:08 debian login[6553]: pam_nologin(login:auth): unexpected response from failed conversation function
Oct 06 14:29:08 debian login[6553]: pam_nologin(login:auth): cannot determine user name
Oct 06 14:29:10 debian login[6553]: FAILED LOGIN 2 FROM pts/2 FOR (unknown), User not known to the underlying authentication m
odule
Oct 06 14:29:10 debian login[6553]: pam_nologin(login:auth): unexpected response from failed conversation function
Oct 06 14:29:10 debian login[6553]: pam_nologin(login:auth): cannot determine user name
Oct 06 14:29:12 debian login[6553]: FAILED LOGIN 3 FROM pts/2 FOR (unknown), User not known to the underlying authentication m
odule
Oct 06 14:29:12 debian login[6553]: pam_nologin(login:auth): unexpected response from failed conversation function
Oct 06 14:29:12 debian login[6553]: pam_nologin(login:auth): cannot determine user name
Oct 06 14:29:15 debian login[6553]: FAILED LOGIN 4 FROM pts/2 FOR (unknown), User not known to the underlying authentication m
odule
Oct 06 14:29:15 debian login[6553]: pam_nologin(login:auth): unexpected response from failed conversation function
Oct 06 14:29:15 debian login[6553]: pam_nologin(login:auth): cannot determine user name
Oct 06 14:29:18 debian login[6553]: FAILED LOGIN SESSION FROM pts/2 FOR (unknown), User not known to the underlying authentica
tion module
Oct 06 14:29:23 debian systemd[1]: Received SIGCHLD from PID 6553 (login).
Oct 06 14:29:23 debian systemd[1]: Child 6553 (login) died (code=exited, status=0/SUCCESS)
Oct 06 14:29:23 debian systemd[1]: session-13.scope: Child 6553 belongs to session-13.scope.


Strace tells:

root@debian:~# strace login root
execve("/usr/bin/login", ["login", "root"], 0x7ffee2dbe6f8 /* 43 vars */) = 0
brk(NULL)                               = 0x55cdeb3e1000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f89860ab000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=75767, ...}) = 0
mmap(NULL, 75767, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f8986098000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=67584, ...}) = 0
mmap(NULL, 69656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8986086000
mmap(0x7f8986089000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f8986089000
mmap(0x7f8986092000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f8986092000
mmap(0x7f8986096000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f8986096000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14432, ...}) = 0
mmap(NULL, 16464, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8986081000
mmap(0x7f8986082000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f8986082000
mmap(0x7f8986083000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f8986083000
mmap(0x7f8986084000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f8986084000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=153528, ...}) = 0
mmap(NULL, 221392, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f898604a000
mmap(0x7f898604d000, 49152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f898604d000
mmap(0x7f8986059000, 90112, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f8986059000
mmap(0x7f898606f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f898606f000
mmap(0x7f8986071000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8986071000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\236\2\0\0\0\0\0"..., 832) = 832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 840, 64) = 840
fstat(3, {st_mode=S_IFREG|0755, st_size=2003408, ...}) = 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 840, 64) = 840
mmap(NULL, 2055800, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8985e54000
mmap(0x7f8985e7c000, 1462272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f8985e7c000
mmap(0x7f8985fe1000, 352256, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18d000) = 0x7f8985fe1000
mmap(0x7f8986037000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e2000) = 0x7f8986037000
mmap(0x7f898603d000, 52856, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f898603d000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=30632, ...}) = 0
mmap(NULL, 28720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8985e4c000
mmap(0x7f8985e4e000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f8985e4e000
mmap(0x7f8985e51000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f8985e51000
mmap(0x7f8985e52000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f8985e52000
close(3)                                = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8985e4a000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8985e48000
arch_prctl(ARCH_SET_FS, 0x7f8985e4b600) = 0
set_tid_address(0x7f8985e4b8d0)         = 7542
set_robust_list(0x7f8985e4b8e0, 24)     = 0
rseq(0x7f8985e4b500, 0x20, 0, 0x53053053) = 0
mprotect(0x7f8986037000, 16384, PROT_READ) = 0
mprotect(0x7f8985e52000, 4096, PROT_READ) = 0
mprotect(0x7f898606f000, 4096, PROT_READ) = 0
mprotect(0x7f8986096000, 4096, PROT_READ) = 0
mprotect(0x7f8986084000, 4096, PROT_READ) = 0
mprotect(0x55cdd9837000, 4096, PROT_READ) = 0
mprotect(0x7f89860e7000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7f8986098000, 75767)           = 0
openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3
fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0x17, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
read(3, "40\n", 7)                      = 3
close(3)                                = 0
prctl(PR_CAPBSET_READ, CAP_CHOWN)       = 1
prctl(PR_GET_SECUREBITS)                = 0
prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0)  = 0
prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0
getpid()                                = 7542
getrandom("\x2b\xc6\x7d\x5f\x52\xf2\x65\x45", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55cdeb3e1000
brk(0x55cdeb402000)                     = 0x55cdeb402000
openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=3063024, ...}) = 0
mmap(NULL, 3063024, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f8985b5c000
close(3)                                = 0
openat(AT_FDCWD, "/etc/login.defs", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=5939, ...}) = 0
read(3, "#\n# /etc/login.defs - Configurat"..., 1024) = 1024
read(3, "he variables will then be\n# no m"..., 1024) = 1024
read(3, "mal, add the rest in the shell s"..., 1024) = 1024
read(3, "given before a password expires."..., 1024) = 1024
read(3, "# any combination of letters \"fr"..., 1024) = 1024
read(3, "EFAULT_HOME\tyes\n\n#\n# The pwck(8)"..., 1024) = 819
read(3, "", 1024)                       = 0
close(3)                                = 0
openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=2996, ...}) = 0
read(3, "# Locale name alias data base.\n#"..., 1024) = 1024
read(3, "und for the time being for\n# bac"..., 1024) = 1024
read(3, "-8859-1\ngalego\t\tgl_ES.ISO-8859-1"..., 1024) = 948
read(3, "", 1024)                       = 0
close(3)                                = 0
openat(AT_FDCWD, "/usr/share/locale/en_US.UTF-8/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en_US.utf8/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en_US/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en.UTF-8/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en.utf8/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en/LC_MESSAGES/util-linux.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
rt_sigaction(SIGALRM, {sa_handler=0x55cdd9828e90, sa_mask=[ALRM], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f8985e93df0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGALRM, NULL, {sa_handler=0x55cdd9828e90, sa_mask=[ALRM], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f8985e93df0}, 8) = 0
rt_sigaction(SIGALRM, {sa_handler=0x55cdd9828e90, sa_mask=[ALRM], sa_flags=SA_RESTORER, sa_restorer=0x7f8985e93df0}, NULL, 8) = 0
alarm(60)                               = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[QUIT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f8985e93df0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[INT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f8985e93df0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
setpriority(PRIO_PROCESS, 0, 0)         = 0
getuid()                                = 0
geteuid()                               = 0
getgid()                                = 0
getegid()                               = 0
prctl(PR_GET_DUMPABLE)                  = 1 (SUID_DUMP_USER)
close_range(3, 4294967295, 0)           = 0
setpgid(0, 0)                           = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
fstat(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(0x88, 0x2), ...}) = 0
readlink("/proc/self/fd/0", "/dev/pts/2", 4095) = 10
newfstatat(AT_FDCWD, "/dev/pts/2", {st_mode=S_IFCHR|0600, st_rdev=makedev(0x88, 0x2), ...}, 0) = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
newfstatat(AT_FDCWD, "/dev/pts/2", {st_mode=S_IFCHR|0600, st_rdev=makedev(0x88, 0x2), ...}, AT_SYMLINK_NOFOLLOW) = 0
access("/dev/pts/2", R_OK|W_OK)         = 0
ioctl(0, TIOCGWINSZ, {ws_row=29, ws_col=122, ws_xpixel=0, ws_ypixel=0}) = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
fchown(0, 0, 0)                         = 0
fchmod(0, 0600)                         = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
ioctl(0, TCSETS, {c_iflag=ICRNL|IXON, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|ECHOK|IEXTEN|ECHOCTL|ECHOKE, ...}) = ? ERESTARTSYS (To be restarted if SA_RESTART is set)
--- SIGTTOU {si_signo=SIGTTOU, si_code=SI_KERNEL} ---
--- stopped by SIGTTOU ---
^Cstrace: Process 7542 detached


Regards
Sebastian Kraus

________________________


Sebastian Kraus
Technische Universität Berlin
Fakultät II
Institut für Chemie
Sekretariat C3
Straße des 17. Juni 135
10623 Berlin

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Reply to: