Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pam auth fails after upgrading from 16.06 to 16.08 #1281

Closed
JasperWallace opened this issue Sep 5, 2016 · 3 comments · Fixed by #1346
Closed

pam auth fails after upgrading from 16.06 to 16.08 #1281

JasperWallace opened this issue Sep 5, 2016 · 3 comments · Fixed by #1346
Assignees

Comments

@JasperWallace
Copy link

What version of ejabberd are you using?

16.08

What operating system (version) are you using?

Debian jessie 8.5

How did you install ejabberd (source, package, distribution)?

jessie-backports package version 16.08-1~bpo8+1

What did not work as expected? Are there error messages in the log? What
was the unexpected behavior? What was the expected result?

pam authentication does not work, the epam process is running as ejabberd:ejabberd even tho the binary is setgid shadow. Without group shadow pam cannot access /etc/shadow and so it can't authenticate the user.

I've had a dig around in the ejabberd and epam source code and can't see anything obvious unfortunately.

Note that the epam binary was not changed by the upgrade (or downgrade to 16.06)

Debian bug report is here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836711

@debalance
Copy link

Your problem originates here: #1178
I suggest you close this issue and join the discussion in #1178.

@weiss weiss reopened this Sep 14, 2016
@weiss weiss self-assigned this Sep 14, 2016
weiss added a commit to weiss/ejabberd that referenced this issue Sep 16, 2016
The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes processone#1281.
weiss added a commit to weiss/ejabberd that referenced this issue Sep 16, 2016
The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes processone#1281.
@cromain cromain added this to the ejabberd 16.10 milestone Sep 21, 2016
weiss added a commit to weiss/ejabberd that referenced this issue Oct 19, 2016
The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes processone#1281.
@cromain
Copy link
Contributor

cromain commented Nov 23, 2016

Holger's changes are merged, this can be closed now.

@lock
Copy link

lock bot commented Jun 11, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Jun 11, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants