Bugzilla Bug 100688

Since upgrading from pam 0.77-r6 to 0.78-r2 I have been getting these messages
in the system log:

Jul 29 12:59:49 [kcheckpass] PAM unable to dlopen(/lib/security/pam_console.so)
Jul 29 12:59:49 [kcheckpass] PAM [dlerror: /lib/security/pam_console.so: cannot
open shared object file: No such file or directory]
Jul 29 12:59:49 [kcheckpass] PAM adding faulty module: /lib/security/pam_console.so

I do not see any other symptoms, but since PAM is an important part of the
security system, I thought I would report it. :-)

I *think* it started when I upgraded pam, but I upgraded other things more or
less simultaneously, including switching from devfs to udev.



Reproducible: Always
Steps to Reproduce:
1. Log in using kdm.
2.
3.

Actual Results:  
The following lines were written to the log:

Jul 29 10:20:45 [kdm] :0[9461]: PAM unable to dlopen(/lib/security/pam_console.so)
Jul 29 10:20:45 [kdm] :0[9461]: PAM [dlerror: /lib/security/pam_console.so:
cannot open shared object file: No such file or directory]
Jul 29 10:20:45 [kdm] :0[9461]: PAM adding faulty module:
/lib/security/pam_console.so

I am logged in correctly, and everything seems to work as it should.



# emerge info
Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.3.5-20050130,
glibc-2.3.5-r0, 2.6.12-gentoo-r6 i686)
=================================================================
System uname: 2.6.12-gentoo-r6 i686 Mobile Intel(R) Pentium(R) 4 - M CPU 2.00GHz
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5
sys-apps/sandbox:    1.2.11
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r10
sys-devel/libtool:   1.5.18-r1
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env
/usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config
/usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/
/usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/
/usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe"
DISTDIR="/var/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/
ftp://trumpetti.atm.tut.fi/gentoo/ ftp://ftp.rhnet.is/pub/gentoo/
ftp://gd.tuwien.ac.at/opsys/linux/gentoo/"
LINGUAS="dk fr"
MAKEOPTS="-j2"
PKGDIR="/var/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage /usr/local/portage-marving"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="x86 X Xaw3d acpi alsa atlas avi berkdb bitmap-fonts cdr crypt cups curl dga
dvd emacs emboss encode fam flac font-server foomaticdb fortran gd gdbm gif gpm
gtk gtk2 imagemagick imap imlib java jpeg kde kdeenablefinal kdexdeltas libg++
libwww mad maildir mbox mikmod mime motif mozilla mp3 mpeg mule ncurses netcdf
nls nptl ogg oggvobis oggvorbis opengl oss pam pcmcia pdflib perl plotutils png
pnp ppds python qt quicktime readline real scanner sdl smime spell sse ssl svga
tcltk tcpd tetex tiff truetype truetype-fonts trusted type1-fonts usb vorbis
win32codecs wxwindows xine xml2 xmms xv xvid zlib linguas_dk linguas_fr
userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS

Have you upgraded also kdebase-pam for instance? And you ran etc-update to 
update files in /etc/pam.d ? pam_console support is default to off (and it's 
planned to make it go away in the future) so you need to remove it from your 
pam.d files (this is the default for all the new packages). 
 

I have the latest *stable* kde, kdebase-pam, and pam - and I am always careful
to run etc-update.  But there are two newer versions of kdebase-pam that are
still in ~x86, that could be the problem.  Indeed, there are a few console
entries in pam.d

demokrit pam.d # grep console *
kde:session    optional     /lib/security/pam_console.so
kde-np:session    optional     /lib/security/pam_console.so
xdm:session    optional     pam_console.so

demokrit pam.d # etcat -v pam
[ Results for search key           : pam ]
[ Candidate applications found : 11 ]

 Only printing found installed programs.

*  sys-libs/pam :
        [   ] 0.77 (0)
        [   ] 0.77-r1 (0)
        [M~ ] 0.77-r2 (0)
        [M~ ] 0.77-r3 (0)
        [M~ ] 0.77-r4 (0)
        [   ] 0.77-r6 (0)
        [M~ ] 0.77-r7 (0)
        [M~ ] 0.77-r8 (0)
        [M~ ] 0.78 (0)
        [M~ ] 0.78-r1 (0)
        [  I] 0.78-r2 (0)

demokrit pam.d # etcat -v kdebase-pam
[ Results for search key           : kdebase-pam ]
[ Candidate applications found : 3 ]

 Only printing found installed programs.

*  kde-base/kdebase-pam :
        [  I] 4 (0)
        [M~ ] 5 (0)
        [M~ ] 6 (0)

If it goes away when kdebase-pam version 5 or 6 goes stable, and if no harm is
done by these lines, then I guess the problem will solved itself.  :-)

Thanks for the explanations!

/Jakob

Well this means that there's a bit of a problem on stable tree. 
 
KDE and X11, hopes to get the pamd files without pam_console stable soon? 
 
[In the mean time, simply remove the pam_console lines and that should be 
enough as workaround] 
 

kdebase-pam-6 is now stable on x86. X11 is tracked in bug 97897.