Package: libpam-mount
Version: 0.44-1+lenny3
Severity: important

When trying to mount cifs shares using .pam_mount.conf.xml as a user (with
luserconf enabled in /etc/security/pam_mount.conf.xml) the login program
will crash:
Jan 29 11:41:44 debussy kernel: [ 3780.327796] login[22399]: segfault at 0
ip 7f43a5aa3a92 sp 7fffae3a1a98 error 4 in libc-2.7.so[7f43a5a29000+14a000]

As the user loging in with telnet, I can only see the following:
------------------
pam_mount(rdconf1.c:617) path to luserconf set to
/home/ethaden/.pam_mount.conf.xml
pam_mount(pam_mount.c:458) Entered pam_mount session stage
pam_mount(pam_mount.c:479) back from global readconfig
pam_mount(pam_mount.c:483) going to readconfig user
pam_mount(pam_mount.c:488) back from user readconfig
pam_mount(misc.c:43) Session open: (uid=0, euid=0, gid=1000, egid=1000)
pam_mount(rdconf2.c:198) checking sanity of volume record (VOLUME NAME)
Connection closed by foreign host.
------------------

However when using the same volume definitions in the pam_mount main config
file, everything works fine (with empty .pam_mount.conf.xml file in the home
dir).

I'm using the standard config file with the following changes:
---------------
<luserconf name=".pam_mount.conf.xml" />
<mntoptions
allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other,iocharset,noperm"
/>
<!--
<mntoptions deny="suid,dev" />
<mntoptions allow="*" />
<mntoptions deny="*" />
-->
<mntoptions require="nosuid,nodev" />
--------------

My user pam-mount config file contains the following ("anonymized" share
and server names):
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
<pam_mount>

<volume options="nosuid,nodev,noperm,iocharset=utf8"
        mountpoint="/home/user/mnt/SERVER/SHARE"
        path="SHARE"
        user="user"
        server="SERVER"
        fstype="cifs" />

</pam_mount>

The file /etc/pam.d/login looks like this:

--------------
# See comments in /etc/login.defs
session    optional   pam_mail.so standard

# SELinux needs to intervene at login time to ensure that the process
# starts in the proper default security context.
# Uncomment the following line to enable SELinux
# session required pam_selinux.so select_context

# Standard Un*x account and session
@include common-account
@include common-session
@include common-pammount
@include common-password
--------------


-- System Information:
Debian Release: 5.0
  APT prefers testing
  APT policy: (650, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-mount depends on:
ii  debconf                    1.5.24        Debian configuration management sy
ii  libc6                      2.7-18        GNU C Library: Shared libraries
ii  libhx13                    1.18-1        A library providing queue, tree, I
ii  libpam0g                   1.0.1-5       Pluggable Authentication Modules l
ii  libssl0.9.8                0.9.8g-15     SSL shared libraries
ii  libxml-writer-perl         0.604-1       Perl module for writing XML docume
ii  libxml2                    2.6.32.dfsg-5 GNOME XML library
ii  mount                      2.13.1.1-1    Tools for mounting and manipulatin

libpam-mount recommends no packages.

Versions of packages libpam-mount suggests:
pn  cryptsetup                 <none>        (no description available)
pn  davfs2                     <none>        (no description available)
ii  fuse-utils                 2.7.4-1.1     Filesystem in USErspace (utilities
ii  lsof                       4.78.dfsg.1-4 List open files
pn  ncpfs                      <none>        (no description available)
ii  openssl                    0.9.8g-15     Secure Socket Layer (SSL) binary a
ii  psmisc                     22.6-1        Utilities that use the proc filesy
ii  smbfs                      2:3.2.5-4     mount and umount commands for the 
pn  truecrypt-utils            <none>        (no description available)

-- debconf information:
* libpam-mount/convert-xml-config: true



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to