Summary: | sys-apps/util-linux[pam]: should install /etc/pam.d/runuser and /etc/pam.d/runuser-l | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Eric Benoit <eric> |
Component: | [OLD] Core system | Assignee: | Gentoo's Team for Core System packages <base-system> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | aditsu, barzog, Dessa, gentoo, pam-bugs+disabled, samurai.no.dojo |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Eric Benoit
2013-09-13 12:47:54 UTC
at a glance, it looks like we want "runuser" to be the same as "su", and "runuser-l" to be the same as "login" since these are only used by the runuser program from util-linux, it looks like it should be part of util-linux rather than pambase *** Bug 570380 has been marked as a duplicate of this bug. *** *** Bug 553122 has been marked as a duplicate of this bug. *** Same here. When I try tu use puppetserver. Service fails right a way and when I try tu run "#puppetserver foreground --debug" it fails with "runuser: Failure setting user credentials" Add me to the list of affected users. Trying to install Atlassian Jira on a gentoo system, their startup scripts fail quickly every time. After a bunch of digging and strace()ing, found that their startup scripts require a functioning "runuser", which Gentoo doesn't have due to this pam misconfiguration. If /etc/pam.d/runuser* is missing, PAM falls back to "other", which is pam_deny everything. I can confirm that copying /etc/pam.d/su to /etc/pam.d/runuser resolves the issue. @spanky I'd agree that it should be part of util-linux. Also now affected. https://review.openstack.org/#/c/414347/25/tests/elements/dibdevel-minimal/post-install.d/80-fix-runuser fixed in 2.29.2-r1 |