Re: openpam error from sshd
"Jacques A. Vidrine" <[EMAIL PROTECTED]> writes: > I believe I fixed this in revision 1.13 of pam_krb5.c. I'd be much > obliged if you double-checked. Looks fine to me. Thanks! DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: openpam error from sshd
On Mon, Jan 27, 2003 at 06:17:37PM +0100, Dag-Erling Smorgrav wrote: > Kris Kennaway <[EMAIL PROTECTED]> writes: > > I've just updated bento to 5.0, and sshd is now giving the following > > error every few seconds: > > > > bento sshd[55737]: in _openpam_check_error_code(): > > pam_sm_setcred(): unexpected return value 24 > > > > Peter says he's seen this elsewhere on the cluster. What's going on? > > *grumble* it's a bug in one of our PAM modules (krb5, I think), which > I never got around to fixing it because it isn't really important. > Error 24 is PAM_NO_MODULE_DATA, which isn't an allowed return value > for pam_setcred() according to the XSSO, but nobody really cares > because anything else than PAM_SUCCESS is an error, so the bug doesn't > have any adverse effect other than making OpenPAM bitch so I remember > to fix it :) I believe I fixed this in revision 1.13 of pam_krb5.c. I'd be much obliged if you double-checked. Cheers, -- Jacques A. Vidrine <[EMAIL PROTECTED]> http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos [EMAIL PROTECTED] . [EMAIL PROTECTED] . [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: openpam error from sshd
Kris Kennaway <[EMAIL PROTECTED]> writes: > I've just updated bento to 5.0, and sshd is now giving the following > error every few seconds: > > bento sshd[55737]: in _openpam_check_error_code(): > pam_sm_setcred(): unexpected return value 24 > > Peter says he's seen this elsewhere on the cluster. What's going on? *grumble* it's a bug in one of our PAM modules (krb5, I think), which I never got around to fixing it because it isn't really important. Error 24 is PAM_NO_MODULE_DATA, which isn't an allowed return value for pam_setcred() according to the XSSO, but nobody really cares because anything else than PAM_SUCCESS is an error, so the bug doesn't have any adverse effect other than making OpenPAM bitch so I remember to fix it :) Workaround until I fix the module: in src/lib/libpam/libpam/Makefile, add CFLAGS += -DOPENPAM_RELAX_CHECKS somewhere around the other CFLAGS stuff, then make clean && make && make install. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
