Of the three different systems I have snort installed; all of them failed the 2.2.0 ebuild. It fails at install-phase, apparently usermod as it finishes: -------------------------------------------------------- >>> Install snort-2.2.0 into /var/tmp/portage/snort-2.2.0/image/ category net-analyzer (...) make[2]: Nothing to be done for `install-exec-am'. /bin/sh ./mkinstalldirs /var/tmp/portage/snort-2.2.0/image//usr/share/man/man8 mkdir /var/tmp/portage/snort-2.2.0/image/usr/share mkdir /var/tmp/portage/snort-2.2.0/image/usr/share/man mkdir /var/tmp/portage/snort-2.2.0/image/usr/share/man/man8 /bin/install -c -m 644 ./snort.8 /var/tmp/portage/snort-2.2.0/image//usr/share/man/man8/snort.8 make[2]: Leaving directory `/var/tmp/portage/snort-2.2.0/work/snort-2.2.0' make[1]: Leaving directory `/var/tmp/portage/snort-2.2.0/work/snort-2.2.0' install: `doc/signatures' is a directory gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/signatures: No such file or directory gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/ACID-0.9.6b21.tar.gz already has .gz suf fix -- unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/Guardian.tar.gz already has .gz suffix - - unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/Net-SnortLog-0.1.tar.gz already has .gz suffix -- unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/Spade-092200.1.tar.gz already has .gz su ffix -- unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/passiveOS.tar.gz already has .gz suffix -- unchanged install: `contrib/rpm' is a directory gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/rpm: No such file or directory gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/snortdb-extra.gz already has .gz suffix -- unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/snortnet.tar.gz already has .gz suffix - - unchanged gzip: /var/tmp/portage/snort-2.2.0/image/usr/share/doc/snort-2.2.0/contrib/snortwatch-0.7.tar.gz already has .gz su ffix -- unchanged man: gzipping man page: snort.8 prepallstrip: strip: strip: usr/bin/snort >>> Completed installing into /var/tmp/portage/snort-2.2.0/image/ >>> Merging net-analyzer/snort-2.2.0 to / usermod: PAM authentication failed !!! ERROR: net-analyzer/snort-2.2.0 failed. !!! Function pkg_preinst, Line 102, Exitcode 1 !!! usermod problem !!! If you need support, post the topmost build error, NOT this status message. !!! FAILED preinst: 1 [17:52]root@stue:~> -------------------------------------------------------- This is what happenes when I try the usermod commands specified in the ebuilds: ------------------------------------------------------ [19:38]root@stue:~> usermod -d /var/log/snort snort usermod: PAM authentication failed [19:39]root@stue:~> usermod -g snort snort usermod: PAM authentication failed [19:39]root@stue:~> usermod -s "/dev/null" snort usermod: PAM authentication failed [19:39]root@stue:~> id uid=0(root) gid=0(root) groups=0(root) [19:39]root@stue:~> ------------------------------------------------------
see bug 69895
bug 69895 is resolved: reemerge shadow, and reemerge snort again.