Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 72251 - login from wincvs machine to cvsd pserver fails with "PAM open session error: System error"
Summary: login from wincvs machine to cvsd pserver fails with "PAM open session error:...
Status: RESOLVED DUPLICATE of bug 103728
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High critical (vote)
Assignee: Maintainers for cvs, and cvs related tools (the version control system) [OBSOLETE]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-11-23 08:11 UTC by David Butler
Modified: 2020-05-01 15:22 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Butler 2004-11-23 08:11:22 UTC
I am running an internal pserver using cvsd and I am not which package created the problem, but I can no longer do a cvs login from linux or cvs all commands give this error result.  My /var/log/messages has this line in it:  
cvs: PAM pam_open_session: NULL pam handle passed


Reproducible: Always
Steps to Reproduce:
1. cvs login from any host
2. try any other cvs command
3.

Actual Results:  
failure

Expected Results:  
successful command

cvsd version 1.0.3
pam version 0.77-r3
Comment 1 Jeremy 2004-12-07 18:18:16 UTC
I am also seeing the exact same problem. Using cvs 1.12.10, pam 0.77-r3. Get the same open_session error (NULL handle) from both win machines (wincvs, tortoiseCVS) and from any account on the server itself. My only solution was to drop back to cvs version 1.12.9.
Comment 2 Paul Slinski 2004-12-14 19:13:01 UTC
This appears to be a known CVS bug.

Building without pam fixes the problem.

USE="-pam" emerge cvs
Comment 3 Rainer Größlinger (RETIRED) gentoo-dev 2004-12-15 09:15:10 UTC
I just committed cvs-1.12.11, can you tell me if that problem still exists for you guys?
Comment 4 David Butler 2004-12-20 15:56:07 UTC
I tested the latest version and still have the same problems... I really think it is in the pserver or (cvsd) versus the cvs client.
Comment 5 Max Kalika (RETIRED) gentoo-dev 2004-12-20 17:34:31 UTC
seeing as how csvd doesn't use PAM at all, I don't think this is a problem on it's side.  Can you get authentication to work without cvsd in the picture? (direct to pserver? -- via xinit or some such?)
Comment 6 Arthur de Jong 2005-01-11 02:29:10 UTC
You could try to add "SystemAuth=no" to CVSROOT/config. This should disable usage of PAM within cvs. Alternatively you could set up a PAM environment inside the chroot jail (/var/lib/cvsd) depending on your requirements (this is not recommended though).
Comment 7 Brian Murphy 2005-01-20 12:27:14 UTC
This is now fixed in upstream cvs (by me).
See cvs' bugzilla for progress

https://ccvs.cvshome.org/issues/show_bug.cgi?id=230

/Brian
Comment 8 Dennis Freise 2005-03-15 09:28:00 UTC
Since it's some time since this fix, could someone please commit a version of 1.12.11 which includes this fix, into portage ?

TIA.
Comment 9 Nahor 2005-08-25 10:14:10 UTC
I have the problem with the recently unmasked cvs-1.12.12-r2 (x86, +crypt -doc
+emacs -kerberos +pam). I reverted back to cvs-1.12.9 and it works again.
Comment 10 awk 2005-08-25 19:19:46 UTC
Same here, I just installed cvs-1.12.12-r2 and I saw the error message in the subject. I couldn't connect 
from any client. Recompiling with USE="-pam" solved the problem.
Comment 11 Nahor 2005-08-26 08:20:24 UTC
Actually, I missed the "cvsd" in the title. I'm using xinetd. And I found the
fix. Maybe it applies for cvsd too.

See bug 103728 (now fixed in gentoo cvs tree): add "session include system-auth"
in /etc/pam.d/cvs
Comment 12 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-08-26 08:23:54 UTC

*** This bug has been marked as a duplicate of 103728 ***