Date: Mon, 27 Jan 2003 18:17:37 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Kris Kennaway <kris@obsecurity.org> Cc: current@FreeBSD.org Subject: Re: openpam error from sshd Message-ID: <xzplm16qzpq.fsf@flood.ping.uio.no> In-Reply-To: <20030125073341.GA11308@rot13.obsecurity.org> (Kris Kennaway's message of "Fri, 24 Jan 2003 23:33:41 -0800") References: <20030125073341.GA11308@rot13.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway <kris@obsecurity.org> writes: > I've just updated bento to 5.0, and sshd is now giving the following > error every few seconds: > > <auth.err> bento sshd[55737]: in _openpam_check_error_code(): > pam_sm_setcred(): unexpected return value 24 > > Peter says he's seen this elsewhere on the cluster. What's going on? *grumble* it's a bug in one of our PAM modules (krb5, I think), which I never got around to fixing it because it isn't really important. Error 24 is PAM_NO_MODULE_DATA, which isn't an allowed return value for pam_setcred() according to the XSSO, but nobody really cares because anything else than PAM_SUCCESS is an error, so the bug doesn't have any adverse effect other than making OpenPAM bitch so I remember to fix it :) Workaround until I fix the module: in src/lib/libpam/libpam/Makefile, add CFLAGS += -DOPENPAM_RELAX_CHECKS somewhere around the other CFLAGS stuff, then make clean && make && make install. DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzplm16qzpq.fsf>