Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 Jan 2003 16:54:35 -0600 (CST)
From:      Charlie & <root@karma.iats.missouri.edu>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   bin/46742: Login with pam_krb5 results in signal 11
Message-ID:  <200301032254.h03MsZww000742@karma.iats.missouri.edu>

index | next in thread | raw e-mail


>Number:         46742
>Category:       bin
>Synopsis:       Login with pam_krb5 results in signal 11
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jan 03 15:00:16 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Ryan Dooley <dooleyr@missouri.edu>
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
University of Missouri - Columbia
>Environment:
System: FreeBSD karma.iats.missouri.edu 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Fri Jan 3 15:52:20 CST 2003 root@karma.iats.missouri.edu:/usr/src/sys/i386/compile/KARMA i386


>Description:

A non-root user who wishes to login to a 5-CURRENT system authenticates 
correctly but the login(1) exits with a signal 11.

>How-To-Repeat:

Install MIT kerberos 1.2.7, pam_krb5 1.0.3 on a -CURRENT system with the 
following /etc/pam.d/login script.


#
# $FreeBSD: src/etc/pam.d/login,v 1.11 2002/05/08 00:33:02 des Exp $
#
# PAM configuration for the "login" service
#

# auth
auth		required	pam_nologin.so	no_warn
auth		sufficient	pam_self.so	no_warn
auth		sufficient	pam_opie.so	no_warn no_fake_prompts
auth		requisite	pam_opieaccess.so	no_warn
#auth		sufficient	pam_kerberosIV.so	no_warn try_first_pass
auth		sufficient	pam_krb5.so	no_warn try_first_pass missing_keytab_ok
#auth		sufficient	pam_ssh.so	no_warn try_first_pass
auth		required	pam_unix.so	no_warn try_first_pass nullok

# account
#account	required	pam_kerberosIV.so
account		required	pam_krb5.so
account		required	pam_login_access.so
account		required	pam_securetty.so
account		required	pam_unix.so

# session
#session	required	pam_kerberosIV.so
session		required	pam_krb5.so
#session	required	pam_ssh.so
session		required	pam_lastlog.so	no_fail

# password
#password	sufficient	pam_kerberosIV.so	no_warn try_first_pass
password	sufficient	pam_krb5.so	no_warn try_first_pass
password	required	pam_unix.so	no_warn try_first_pass

>Fix:

No fix.

>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200301032254.h03MsZww000742>