After updating from 2.8 to 2.9 (see bug #270243), pam authentication fails due to a missing symbol in the new libnsl. PAM was built against sys-libs/glibc-2.8_p20080602-r1 ... it worked with that version of glibc, but not the new stable (sys-libs/glibc-2.9_p20081201-r2) PAM unable to dlopen(/lib64/security/pam_unix.so): /lib/libnsl.so.1: symbol __libc_clntudp_bufcreate, version GLIBC_PRIVATE not defined in file libc.so.6 with link time reference Portage 2.2_rc33 (default/linux/amd64/2008.0, gcc-4.3.2, glibc-2.9_p20081201-r2, 2.6.28-hardened-r9 x86_64) ================================================================= System uname: Linux-2.6.28-hardened-r9-x86_64-AMD_Athlon-tm-_64_Processor_2800+-with-glibc2.2.5 Timestamp of tree: Tue, 30 Jun 2009 06:45:01 +0000 app-shells/bash: 3.2_p39 dev-java/java-config: 2.1.7 dev-lang/python: 2.5.4-r2 dev-python/pycrypto: 2.0.1-r8 dev-util/cmake: 2.6.4 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.6-r2 sys-devel/autoconf: 2.13, 2.63 sys-devel/automake: 1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.27-r2 ACCEPT_KEYWORDS="amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -fomit-frame-pointer -march=k8" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-O2 -pipe -fomit-frame-pointer -march=k8" DISTDIR="/var/tmp/gentoo/distfiles" FEATURES="bindeps candy collision-protect distlocks fixpackages metadata-transfer parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-orphans userfetch userpriv userpriv_fakeroot usersandbox verify-rdepend" GENTOO_MIRRORS="http://gentoo.osuosl.org/ http://gentoo.mirrors.pair.com/" LANG="en_US.utf8" LC_ALL="en_US.utf8" LDFLAGS="-Wl,-O1" LINGUAS="en en_US" MAKEOPTS="-j2" PKGDIR="/var/tmp/gentoo/packages-amd64" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync15.us.gentoo.org/gentoo-portage" USE="3dnow 3dnowext 3ds S3TC X X509 Xaw3d a52 aac aalib acl acpi activefilter adplug aim alsa amd amd64 amr ao apache2 artworkextra atlas audiofile avahi avantgo bash-completion bcmath berkdb bidi browserplugin bzip2 bzlib c++ cairo calendar caps cdda cddb cdio cdparanoia cdr cgi chroot clamav clamd clamdtop clanJavaScript clanVoice clearpasswd cli client clisp cracklib crypt cscope css cups curl curlwrappers cvs cvsgraph dbase dbcp dbm dbus dbx dedicated dga dio divx4linux dlloader dmx dnd dri dts dv dvd dvdr dvdread edl eds emacs emacs-w3 enca encode enscript erandom esd ethereal evms2 evo exif exiv2 expat ext-png ext-zlib extensions f77 faac faad fam fame fat fax fbcon fbdev ffmpeg fftw filter firefox flac flash flatfile fltk fluidsynth font-server foomaticdb fortran fpx freetts freetype fs gb gcj gcl gd gd-external gdbm gif gimp gimpprint glade glep glib glibc-omitfp glitz glut gmp gmtfull gmthigh gmtsuppl gmttria gnome gnomedb gnuplot gnutls gocr gpm gps graphviz gs gstreamer gtk gtkhtml hal hash hbci hdri highlight howl howl-compat iconv icq idea idl idn ieee1394 image imagemagick imap imlib imlib2 inifile innodb ipalias iproute2 ipsec ipv6 isdnlog ithreads jabber jack java javacomm javamail javascript jbig jikes joystick jpeg jpeg2k junit justify kde ladcca latex lcms ldap libcaca libclamav libdsk libedit libg++ libgda libsamplerate libwww lids live lm_sensors lmtp log4j logitech-mouse ltsp lua lucid lzo mad maildir makecheck matroska mbrola mcal md5sum mdnsresponder-compat mhash midi mikmod mime ming mixer mjpeg mmx mmxext mng mod_python mozcalendar mozctl mozdevelop mozilla mozp3p mozsvg mozxmlterm mp2 mp3 mpeg mpeg4 mplayer mpm-prefork msession msn mtp mudflap mule multilib multislot musepack music mysql mysqli mythtv nas native ncurses neXt network nis nls nptl nptlonly nsplugin nviz oav objc objc++ objc-gc ocaml ocrad odbc offensive ofx ogg oggvorbis oldworld openal opendoc openexr opengl openmp openssl opensslcrypt opera oscar oss pam parse-clocks pcap pch pcntl pcre pda pdf perl php physfs pic pie plotutils png pnm pnp portaudio povray ppds pppd prelude procmail pulseaudio python q32 qhull qt qt3 qt3support qt4 quicktime rar readline recode reflection regexp rplay rtc samba sasl savedconfig sdk sdl sdl-image server session sharedmem sid silc slp sms sndfile soap socks5 sox speex spell spl sql sqlite sqlite3 src srt sse sse2 ssl subversion suexec svg sysfs sysvipc t1lib tcltk tcpd tesseract tetex tex tga theora tidy tiff timidity transcode transparent-proxy truetype trusted tta type1 ucs2 unicode urandom usb user-homedirs userlocales v4l v4l2 vcd vda vhosts videos vim-with-x virus-scan visualization vlm vnc vorbis wav wavpack wddx webkit wma wmf wsconvert wxwin wxwindows x264 xanim xchattext xcomposite xemacs xface xforms xfs xine xinerama xml xml2 xmlreader xmlrpc xmlwriter xorg xosd xpm xsl xulrunner xv xvid xvmc yahoo zeo zeroconf zip zlib" ALSA_CARDS="via82xx" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="wacom joystick keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_US" USERLAND="GNU" VIDEO_CARDS="nvidia nv" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
rebuilding pam fixed the problem for me... but still, this is something that needs to be addressed...
your output doesnt show an ABI issue at all. it shows your libraries are out of sync. GLIBC_PRIVATE is something that only glibc libraries themselves should be using, and the version of libnsl.so.1 loaded needs to always match libc.so.6. if pam is using GLIBC_PRIVATE symbols, then it is broken. if you've re-emerged things and no one can reproduce, then there isnt anything to be done here. $ readelf -s /lib/libc.so.6 | grep libc_clnt 1962: 000fa120 936 FUNC GLOBAL DEFAULT 11 __libc_clntudp_bufcreate@@GLIBC_PRIVATE $ readelf -s /lib/libnsl.so.1 | grep libc_clnt 85: 00000000 936 FUNC GLOBAL DEFAULT UND __libc_clntudp_bufcreate@GLIBC_PRIVATE (11) $ readelf -s /lib/security/pam_unix.so | grep PRIVATE <nothing>
I had this same issue. I had to reboot for the system to work properly again.
i dont think you'd need to reboot, just restart the affected services
xdm was the affected service. I restarted hal and xdm twice before reboot. If I had found this bug, I probably would have just rebuilt pam and continued on until the next problem cropped up. Also, since this upgrade, I have noticed other strange happenings like firefox crashing at random (usually with video), and I've already tried to rebuild the necessary programs for it including firefox. So, currently, I'm in the process of rebuilding everything (note: Don't know if it has been necessary for this step before, but usually I would automatically rebuild everything when gcc or glibc are upgraded anyway. But this time I decided to see what would happen.). Hopefully this will cure my issues once and for all.
This Redhat bug report might help to understand the problem: https://bugzilla.redhat.com/show_bug.cgi?id=458825#c2
