Trouble shooting PAM error on RHEL 7.5

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Trouble shooting PAM error on RHEL 7.5

Stephen B Goldman
Hello All,
               Not sure if this is proper forum, I am trying to troubleshoot a PAM error testing authentication of an older
RPM  mit-krb-config-1.0-3.noarch.rpm and related files.

               Hoping for pointers to resolve the errors messages below.

Thanks in advance,
Stephen





Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM unable to dlopen(/usr/lib64/security/pam_krb5.so): /usr/lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory
Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM adding faulty module: /usr/lib64/security/pam_krb5.so
Jun 28 12:16:39 bmc-pub14 unix_chkpwd[45894]: password check failed for user (sgoldman)
Jun 28 12:16:39 bmc-pub14 sshd[45882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bmc-sb1.mit.edu  user=sgoldman
Jun 28 12:16:41 bm



Stephen Goldman
Systems Administrator
Massachusetts Institute of Technology
Department of Biology
31 Ames Street 68-211
Cambridge, Ma 02139
[hidden email] -617-452-2595

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

RE: Trouble shooting PAM error on RHEL 7.5

Eichhorn, Thomas
Hi,

> /usr/lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory

There should be a package called 'pam_krb5'. Seems like it's not installed on the system. Can you please check if it is installed on your server?

Best regards,
Thomas

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Stephen B Goldman
Sent: Thursday, June 28, 2018 7:11 PM
To: kerberos <[hidden email]>
Subject: Trouble shooting PAM error on RHEL 7.5

Hello All,
               Not sure if this is proper forum, I am trying to troubleshoot a PAM error testing authentication of an older RPM  mit-krb-config-1.0-3.noarch.rpm and related files.

               Hoping for pointers to resolve the errors messages below.

Thanks in advance,
Stephen





Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM unable to dlopen(/usr/lib64/security/pam_krb5.so): /usr/lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM adding faulty module: /usr/lib64/security/pam_krb5.so Jun 28 12:16:39 bmc-pub14 unix_chkpwd[45894]: password check failed for user (sgoldman) Jun 28 12:16:39 bmc-pub14 sshd[45882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bmc-sb1.mit.edu  user=sgoldman Jun 28 12:16:41 bm



Stephen Goldman
Systems Administrator
Massachusetts Institute of Technology
Department of Biology
31 Ames Street 68-211
Cambridge, Ma 02139
[hidden email] -617-452-2595

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________


Klinikum Nürnberg, Sitz: Nürnberg, Amtsgericht Nürnberg -Registergericht- HRA 14190, Vorstand: Prof. Dr. Achim Jockwig (Vorsitzender), Dr. Andreas Becke, Univ.-Prof. Dr. Dr. Günter Niklewski, Peter Schuh

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

RE: Trouble shooting PAM error on RHEL 7.5

Eichhorn, Thomas
It seems the package was declared deprecated. See https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.5_release_notes/chap-red_hat_enterprise_linux-7.5_release_notes-deprecated_functionality
So I'm not quite sure if the package is still available in the repository (have no RHEL installation here to check).

Here a migration guide to sssd:
https://docs.pagure.org/SSSD.sssd/users/pam_krb5_migration.html
Unfortunately, I can't say more about this subject because I have no experience here.
Maybe someone else can help you.

Best regards,
Thomas

-----Original Message-----
From: Eichhorn, Thomas
Sent: Friday, June 29, 2018 7:51 AM
To: 'Stephen B Goldman' <[hidden email]>; kerberos <[hidden email]>
Subject: RE: Trouble shooting PAM error on RHEL 7.5

Hi,

> /usr/lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory

There should be a package called 'pam_krb5'. Seems like it's not installed on the system. Can you please check if it is installed on your server?

Best regards,
Thomas

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Stephen B Goldman
Sent: Thursday, June 28, 2018 7:11 PM
To: kerberos <[hidden email]>
Subject: Trouble shooting PAM error on RHEL 7.5

Hello All,
               Not sure if this is proper forum, I am trying to troubleshoot a PAM error testing authentication of an older RPM  mit-krb-config-1.0-3.noarch.rpm and related files.

               Hoping for pointers to resolve the errors messages below.

Thanks in advance,
Stephen





Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM unable to dlopen(/usr/lib64/security/pam_krb5.so): /usr/lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM adding faulty module: /usr/lib64/security/pam_krb5.so Jun 28 12:16:39 bmc-pub14 unix_chkpwd[45894]: password check failed for user (sgoldman) Jun 28 12:16:39 bmc-pub14 sshd[45882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bmc-sb1.mit.edu  user=sgoldman Jun 28 12:16:41 bm



Stephen Goldman
Systems Administrator
Massachusetts Institute of Technology
Department of Biology
31 Ames Street 68-211
Cambridge, Ma 02139
[hidden email] -617-452-2595

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________


Klinikum Nürnberg, Sitz: Nürnberg, Amtsgericht Nürnberg -Registergericht- HRA 14190, Vorstand: Prof. Dr. Achim Jockwig (Vorsitzender), Dr. Andreas Becke, Univ.-Prof. Dr. Dr. Günter Niklewski, Peter Schuh

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: Trouble shooting PAM error on RHEL 7.5

Dmitri Pal
On Fri, Jun 29, 2018 at 2:04 AM, Eichhorn, Thomas <
[hidden email]> wrote:

> It seems the package was declared deprecated. See
> https://access.redhat.com/documentation/en-us/red_hat_
> enterprise_linux/7/html/7.5_release_notes/chap-red_hat_
> enterprise_linux-7.5_release_notes-deprecated_functionality
> So I'm not quite sure if the package is still available in the repository
> (have no RHEL installation here to check).
>


​It is available and will be there till the end of support of RHEL7.​



>
> Here a migration guide to sssd:
> https://docs.pagure.org/SSSD.sssd/users/pam_krb5_migration.html
> Unfortunately, I can't say more about this subject because I have no
> experience here.
> Maybe someone else can help you.
>

​How may I help?




>
> Best regards,
> Thomas
>
> -----Original Message-----
> From: Eichhorn, Thomas
> Sent: Friday, June 29, 2018 7:51 AM
> To: 'Stephen B Goldman' <[hidden email]>; kerberos <[hidden email]>
> Subject: RE: Trouble shooting PAM error on RHEL 7.5
>
> Hi,
>
> > /usr/lib64/security/pam_krb5.so: cannot open shared object file: No
> such file or directory
>
> There should be a package called 'pam_krb5'. Seems like it's not installed
> on the system. Can you please check if it is installed on your server?
>
> Best regards,
> Thomas
>
> -----Original Message-----
> From: [hidden email] [mailto:[hidden email]] On
> Behalf Of Stephen B Goldman
> Sent: Thursday, June 28, 2018 7:11 PM
> To: kerberos <[hidden email]>
> Subject: Trouble shooting PAM error on RHEL 7.5
>
> Hello All,
>                Not sure if this is proper forum, I am trying to
> troubleshoot a PAM error testing authentication of an older RPM
> mit-krb-config-1.0-3.noarch.rpm and related files.
>
>                Hoping for pointers to resolve the errors messages below.
>
> Thanks in advance,
> Stephen
>
>
>
>
>
> Jun 28 12:16:28 bmc-pub14 sshd[45882]: PAM unable to
> dlopen(/usr/lib64/security/pam_krb5.so): /usr/lib64/security/pam_krb5.so:
> cannot open shared object file: No such file or directory Jun 28 12:16:28
> bmc-pub14 sshd[45882]: PAM adding faulty module:
> /usr/lib64/security/pam_krb5.so Jun 28 12:16:39 bmc-pub14
> unix_chkpwd[45894]: password check failed for user (sgoldman) Jun 28
> 12:16:39 bmc-pub14 sshd[45882]: pam_unix(sshd:auth): authentication
> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bmc-sb1.mit.edu
> user=sgoldman Jun 28 12:16:41 bm
>
>
>
> Stephen Goldman
> Systems Administrator
> Massachusetts Institute of Technology
> Department of Biology
> 31 Ames Street 68-211
> Cambridge, Ma 02139
> [hidden email] -617-452-2595
>
> ________________________________________________
> Kerberos mailing list           [hidden email]
> https://mailman.mit.edu/mailman/listinfo/kerberos
> ________________________________
>
>
> Klinikum Nürnberg, Sitz: Nürnberg, Amtsgericht Nürnberg -Registergericht-
> HRA 14190, Vorstand: Prof. Dr. Achim Jockwig (Vorsitzender), Dr. Andreas
> Becke, Univ.-Prof. Dr. Dr. Günter Niklewski, Peter Schuh
>
> ________________________________________________
> Kerberos mailing list           [hidden email]
> https://mailman.mit.edu/mailman/listinfo/kerberos
>



--

Thank you,
Dmitri Pal

Engineering Director, Identity Management and Platform Security
Red Hat, Inc.
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos