Since upgrading from pam 0.77-r6 to 0.78-r2 I have been getting these messages in the system log: Jul 29 12:59:49 [kcheckpass] PAM unable to dlopen(/lib/security/pam_console.so) Jul 29 12:59:49 [kcheckpass] PAM [dlerror: /lib/security/pam_console.so: cannot open shared object file: No such file or directory] Jul 29 12:59:49 [kcheckpass] PAM adding faulty module: /lib/security/pam_console.so I do not see any other symptoms, but since PAM is an important part of the security system, I thought I would report it. :-) I *think* it started when I upgraded pam, but I upgraded other things more or less simultaneously, including switching from devfs to udev. Reproducible: Always Steps to Reproduce: 1. Log in using kdm. 2. 3. Actual Results: The following lines were written to the log: Jul 29 10:20:45 [kdm] :0[9461]: PAM unable to dlopen(/lib/security/pam_console.so) Jul 29 10:20:45 [kdm] :0[9461]: PAM [dlerror: /lib/security/pam_console.so: cannot open shared object file: No such file or directory] Jul 29 10:20:45 [kdm] :0[9461]: PAM adding faulty module: /lib/security/pam_console.so I am logged in correctly, and everything seems to work as it should. # emerge info Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.3.5-20050130, glibc-2.3.5-r0, 2.6.12-gentoo-r6 i686) ================================================================= System uname: 2.6.12-gentoo-r6 i686 Mobile Intel(R) Pentium(R) 4 - M CPU 2.00GHz Gentoo Base System version 1.6.13 dev-lang/python: 2.3.5 sys-apps/sandbox: 1.2.11 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe" DISTDIR="/var/portage/distfiles" FEATURES="autoconfig distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/ ftp://trumpetti.atm.tut.fi/gentoo/ ftp://ftp.rhnet.is/pub/gentoo/ ftp://gd.tuwien.ac.at/opsys/linux/gentoo/" LINGUAS="dk fr" MAKEOPTS="-j2" PKGDIR="/var/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage /usr/local/portage-marving" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="x86 X Xaw3d acpi alsa atlas avi berkdb bitmap-fonts cdr crypt cups curl dga dvd emacs emboss encode fam flac font-server foomaticdb fortran gd gdbm gif gpm gtk gtk2 imagemagick imap imlib java jpeg kde kdeenablefinal kdexdeltas libg++ libwww mad maildir mbox mikmod mime motif mozilla mp3 mpeg mule ncurses netcdf nls nptl ogg oggvobis oggvorbis opengl oss pam pcmcia pdflib perl plotutils png pnp ppds python qt quicktime readline real scanner sdl smime spell sse ssl svga tcltk tcpd tetex tiff truetype truetype-fonts trusted type1-fonts usb vorbis win32codecs wxwindows xine xml2 xmms xv xvid zlib linguas_dk linguas_fr userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS
Have you upgraded also kdebase-pam for instance? And you ran etc-update to update files in /etc/pam.d ? pam_console support is default to off (and it's planned to make it go away in the future) so you need to remove it from your pam.d files (this is the default for all the new packages).
I have the latest *stable* kde, kdebase-pam, and pam - and I am always careful to run etc-update. But there are two newer versions of kdebase-pam that are still in ~x86, that could be the problem. Indeed, there are a few console entries in pam.d demokrit pam.d # grep console * kde:session optional /lib/security/pam_console.so kde-np:session optional /lib/security/pam_console.so xdm:session optional pam_console.so demokrit pam.d # etcat -v pam [ Results for search key : pam ] [ Candidate applications found : 11 ] Only printing found installed programs. * sys-libs/pam : [ ] 0.77 (0) [ ] 0.77-r1 (0) [M~ ] 0.77-r2 (0) [M~ ] 0.77-r3 (0) [M~ ] 0.77-r4 (0) [ ] 0.77-r6 (0) [M~ ] 0.77-r7 (0) [M~ ] 0.77-r8 (0) [M~ ] 0.78 (0) [M~ ] 0.78-r1 (0) [ I] 0.78-r2 (0) demokrit pam.d # etcat -v kdebase-pam [ Results for search key : kdebase-pam ] [ Candidate applications found : 3 ] Only printing found installed programs. * kde-base/kdebase-pam : [ I] 4 (0) [M~ ] 5 (0) [M~ ] 6 (0) If it goes away when kdebase-pam version 5 or 6 goes stable, and if no harm is done by these lines, then I guess the problem will solved itself. :-) Thanks for the explanations! /Jakob
Well this means that there's a bit of a problem on stable tree. KDE and X11, hopes to get the pamd files without pam_console stable soon? [In the mean time, simply remove the pam_console lines and that should be enough as workaround]
kdebase-pam-6 is now stable on x86. X11 is tracked in bug 97897.
