Package: libpam-mount
Version: 0.29-2
Severity: serious
When converting the plain-text pam-mount.conf to the new XML format (why,
oh why), user names in single quotes get truncated, leading to a wrong and
invalid XML file. pam_mount checks if the XML config file is valid. Thus,
if pam_mount is a required module, no login is possible anymore.
Maybe the bug is fixed in 0.29-3, however, the broken XML file is not
fixed when upgrading to 0.29-3.
The effect for me: the pam_mount stanza
volume '@medieninformatik studenten' cifs aga.medea H_Students
/home/&/_HOME - - -
gets converted to
<volume user="'@medieninformatik" mountpoint="/home/%(USER)/_HOME"
path="H_Students" server="aga.medea" fstype="cifs" />
Please note the chopped off group name and the single quotation mark. This
quotation mark obviously makes the file invalid (the cause for this stupid
group name is Microsoft's Active Directory, which we authenticate against
using winbind).
Additionally, for groups the conversion should remove the '@' and change
the attribute name to 'prgp'.
The correct conversion would be:
<volume prgp="medieninformatik studenten" mountpoint="/home/%(USER)/_HOME"
path="H_Students" server="aga.medea" fstype="cifs" />
Cheers,
Raphael
--
Dipl.-Medieninf. Raphael Wimmer
Research Assistant
LFE Media Informatics E-Mail: [EMAIL PROTECTED]
University of Munich Skype: real_raphman
Amalienstr. 17 / Room 206 WWW:
http://www.medien.ifi.lmu.de
80333 Munich Tel: +49 (89) 2180-4659
Germany Fax: +49 (89) 2180-99-4659
