From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Jul 23 12:20:01 2007 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CBA9616A41B for ; Mon, 23 Jul 2007 12:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id A6EC513C461 for ; Mon, 23 Jul 2007 12:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.1/8.14.1) with ESMTP id l6NCK1PJ051982 for ; Mon, 23 Jul 2007 12:20:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.1/8.14.1/Submit) id l6NCK19T051981; Mon, 23 Jul 2007 12:20:01 GMT (envelope-from gnats) Resent-Date: Mon, 23 Jul 2007 12:20:01 GMT Resent-Message-Id: <200707231220.l6NCK19T051981@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Alex Keda Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 407B416A417 for ; Mon, 23 Jul 2007 12:17:49 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (unknown [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 1F15A13C45D for ; Mon, 23 Jul 2007 12:17:49 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.1/8.14.1) with ESMTP id l6NCHm23019482 for ; Mon, 23 Jul 2007 12:17:48 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.1/8.14.1/Submit) id l6NCHmTY019481; Mon, 23 Jul 2007 12:17:48 GMT (envelope-from nobody) Message-Id: <200707231217.l6NCHmTY019481@www.freebsd.org> Date: Mon, 23 Jul 2007 12:17:48 GMT From: Alex Keda To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.0 Cc: Subject: ports/114825: pam module pam_abl not working X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Jul 2007 12:20:01 -0000 >Number: 114825 >Category: ports >Synopsis: pam module pam_abl not working >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Jul 23 12:20:01 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Alex Keda >Release: 6.2-STABLE >Organization: ussr >Environment: FreeBSD dag.biz.moskb.local 6.2-STABLE FreeBSD 6.2-STABLE #4: Fri Jul 6 19:46:42 MSD 2007 root@dag.biz.moskb.local:/usr/obj/usr/src/sys/C01 i386 >Description: On compilation - warnings: pwd /usr/ports/security/pam_abl dag# make ===> WARNING: Vulnerability database out of date, checking anyway ===> Extracting for pam_abl-0.2.3 => MD5 Checksum OK for pam_abl-0.2.3.tar.gz. => SHA256 Checksum OK for pam_abl-0.2.3.tar.gz. ===> Patching for pam_abl-0.2.3 ===> Applying FreeBSD patches for pam_abl-0.2.3 ===> pam_abl-0.2.3 depends on shared library: db-4.2.2 - found ===> Configuring for pam_abl-0.2.3 ===> Building for pam_abl-0.2.3 cc -Wall -fPIC -I/usr/local/include -c pam_abl.c pam_abl.c: In function `pam_sm_authenticate': pam_abl.c:363: warning: passing arg 3 of `pam_get_data' from incompatible pointer type cc -Wall -fPIC -I/usr/local/include -c log.c cc -Wall -fPIC -I/usr/local/include -c config.c cc -Wall -fPIC -I/usr/local/include -c rule.c ld -x --shared -L/usr/local/lib -ldb-4.2 -lpthread -o pam_abl.so pam_abl.o log.o config.o rule.o for d in tools ; do cd $d && make all && cd .. ; done cc -Wall -I/usr/local/include -c log.c /usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined /usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined /usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined /usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined /usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined /usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined cc -Wall -I/usr/local/include -c config.c /usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined /usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined /usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined /usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined /usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined /usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined cc -Wall -I/usr/local/include -c rule.c /usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined /usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined /usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined /usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined /usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined /usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined cc -Wall -I/usr/local/include -c pam_abl.c /usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined /usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined /usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined /usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined /usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined /usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined cc -L/usr/local/lib -ldb-4.2 -lpthread -o pam_abl log.o config.o rule.o pam_abl.o ================== after installation I add to /etc/pam.d/sshd string: auth required /usr/local/lib/pam_abl.so config=/usr/local/etc/pam_abl.conf and tried login. On log i see before input incorerect password: Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_db=/var/db/pam_abl/hosts.db Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_purge=2d Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_rule=*:10/1h,30/1d Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_db=/var/db/pam_abl/users.db Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_purge=2d Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_rule=!root:10/1h,30/1d Jul 23 16:19:46 dag pam_abl[86943]: Checking host 172.30.102.20 Jul 23 16:19:46 dag pam_abl[86943]: Checking user lissyara after input incorrect password: Jul 23 16:19:52 dag sshd[86941]: error: PAM: authentication error for lissyara from 172.30.102.20 Jul 23 16:19:52 dag kernel: Jul 23 16:19:52 dag sshd[86941]: error: PAM: authentication error for lissyara from 172.30.102.20 Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_db=/var/db/pam_abl/hosts.db Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_purge=2d Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_rule=*:10/1h,30/1d Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_db=/var/db/pam_abl/users.db Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_purge=2d Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_rule=!root:10/1h,30/1d Jul 23 16:19:52 dag pam_abl[86944]: Checking host 172.30.102.20 Jul 23 16:19:52 dag pam_abl[86944]: Checking user lissyara ================= database files not created, user/hosts not locking. ================= if I add this line twice - all successful login attempt cunt as fail and database created, and user/host locked :) >How-To-Repeat: always >Fix: >Release-Note: >Audit-Trail: >Unformatted: