Bugzilla Bug 72251

I am running an internal pserver using cvsd and I am not which package created
the problem, but I can no longer do a cvs login from linux or cvs all commands
give this error result.  My /var/log/messages has this line in it:  
cvs: PAM pam_open_session: NULL pam handle passed


Reproducible: Always
Steps to Reproduce:
1. cvs login from any host
2. try any other cvs command
3.

Actual Results:  
failure

Expected Results:  
successful command

cvsd version 1.0.3
pam version 0.77-r3

I am also seeing the exact same problem. Using cvs 1.12.10, pam 0.77-r3. Get
the same open_session error (NULL handle) from both win machines (wincvs,
tortoiseCVS) and from any account on the server itself. My only solution was to
drop back to cvs version 1.12.9.

This appears to be a known CVS bug.

Building without pam fixes the problem.

USE="-pam" emerge cvs

I just committed cvs-1.12.11, can you tell me if that problem still exists for
you guys?

I tested the latest version and still have the same problems... I really think
it is in the pserver or (cvsd) versus the cvs client.

seeing as how csvd doesn't use PAM at all, I don't think this is a problem on
it's side.  Can you get authentication to work without cvsd in the picture?
(direct to pserver? -- via xinit or some such?)

You could try to add "SystemAuth=no" to CVSROOT/config. This should disable
usage of PAM within cvs. Alternatively you could set up a PAM environment
inside the chroot jail (/var/lib/cvsd) depending on your requirements (this is
not recommended though).

This is now fixed in upstream cvs (by me).
See cvs' bugzilla for progress

https://ccvs.cvshome.org/issues/show_bug.cgi?id=230

/Brian

Since it's some time since this fix, could someone please commit a version of
1.12.11 which includes this fix, into portage ?

TIA.

I have the problem with the recently unmasked cvs-1.12.12-r2 (x86, +crypt -doc
+emacs -kerberos +pam). I reverted back to cvs-1.12.9 and it works again.

Same here, I just installed cvs-1.12.12-r2 and I saw the error message in the
subject. I couldn't connect 
from any client. Recompiling with USE="-pam" solved the problem.

Actually, I missed the "cvsd" in the title. I'm using xinetd. And I found the
fix. Maybe it applies for cvsd too.

See bug 103728 (now fixed in gentoo cvs tree): add "session include system-auth"
in /etc/pam.d/cvs

*** This bug has been marked as a duplicate of 103728 ***