https://bugzilla.novell.com/show_bug.cgi?id=231187 Summary: 32bit pam_krb5 library does not include credential helper Product: SUSE Linux 10.1 Version: Final Platform: 64bit OS/Version: SuSE Linux 10.1 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: bklang@alkaloid.net QAContact: qa@suse.de I have installed VMWare server on a machine configured to use LDAP and Kerberos for its userbase. When a normal user attempts to authenticate to the vmware-authd process, it crashes with a SIGPIPE. Inspection via strace reveals the following: execve("/lib//security/pam_krb5/pam_krb5_storetmp", [0x80a2b30f7c619fd, 0xffdf5490ffdf54f4, 0xffdf444800000000, 0xf7f17140f7e5ef84, 0xf7f15ff4080a4aa8, "\260\226\337\367\30\233\337\367\260\226\337\367", 0xf7b6db7effdf4468, "\5\4", 0xf7bfc038ffdf4468, 0xf7bfc038f7ec306b, 0xf7bf17a4ffdf4508, 0x809e4940809e474, 0x2800500ffdf44a4, 0xf7f17178f7f17570, 0x809e474f7f17178, "prof_file.c", ...], [/* 28 vars */]) = -1 ENOENT (No such file or directory) exit_group(4294967295) This binary can be found in the 64-bit version of pam_krb5 at /lib64/security/pam_krb5/pam_krb5_storetmp. However because vmware-authd is a 32bit binary, it relies on the 32-bit pam_krb5 module and thus fails. A workaround was to create a symlink in /lib/security/pam_krb5 to the 64-bit version and everything works fine. [bklang@lee:~] (pts/2) [Sat Dec 30 17:01:10]$ rpm -ql pam_krb5|grep ^/lib /lib64/security/pam_krb5 /lib64/security/pam_krb5.so /lib64/security/pam_krb5/pam_krb5_storetmp /lib64/security/pam_krb5afs.so [bklang@lee:~] (pts/2) [Sat Dec 30 17:01:19]$ rpm -ql pam_krb5-32bit|grep ^/lib /lib/security /lib/security/pam_krb5.so /lib/security/pam_krb5afs.so [bklang@lee:~] (pts/2) [Sat Dec 30 17:01:25]$ rpm -q pam_krb5 pam_krb5-32bit pam_krb5-2.2.3-18 pam_krb5-32bit-2.2.3-18 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.