[Bug 738757] New: pam_winbind crashes when the user password is about to expire
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c0 Summary: pam_winbind crashes when the user password is about to expire Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: Other OS/Version: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Samba AssignedTo: samba-maintainers@SuSE.de ReportedBy: aduffeck@suse.com QAContact: samba-maintainers@SuSE.de Found By: --- Blocker: --- When authenticating against ActiveDirectory running on Windows 2003 and the user password is about to expire we get a message about the password expiry and instead of being logged in we see the gdm login screen again. We found the following backtrace in the logs which seems to be causing it: Dec 28 10:38:42 eeesuse gdm][1616]: pam_winbind(gdm:auth): getting password (0x00000390) Dec 28 10:38:42 eeesuse gdm][1616]: pam_winbind(gdm:auth): pam_get_item returned a password Dec 28 10:38:44 eeesuse gdm][1616]: pam_winbind(gdm:auth): user 'TROLLBYN\sara-anders' granted access Dec 28 10:38:44 eeesuse gdm[1676]: ******************* START ********************************** Dec 28 10:38:45 eeesuse gdm[1676]: [Thread debugging using libthread_db enabled] Dec 28 10:38:45 eeesuse gdm[1676]: 0xb767543e in __waitpid_nocancel () from /lib/libpthread.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #0 0xb767543e in __waitpid_nocancel () from /lib/libpthread.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #1 0x08057d1d in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: #2 0x08058129 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: #3 <signal handler called> Dec 28 10:38:45 eeesuse gdm[1676]: #4 0xb75288c5 in raise () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: #5 0xb752a1d5 in abort () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: #6 0xb76fe40e in g_assertion_message () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #7 0x0804f9df in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: #8 0xb7117fc4 in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #9 0xb7118049 in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #10 0xb7118c2c in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #11 0xb7118dbc in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #12 0xb7119f4a in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #13 0xb711a721 in pam_sm_authenticate () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: #14 0xb7852aa5 in ?? () from /lib/libpam.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #15 0xb78521c7 in pam_authenticate () from /lib/libpam.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #16 0x08051763 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: #17 0xb76d4d10 in ?? () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #18 0xb76d8e2f in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #19 0xb76d9560 in ?? () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #20 0xb76d9b6b in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: #21 0x0804c819 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: #22 0xb7514003 in __libc_start_main () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: #23 0x0804c8d1 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: Backtrace stopped: Not enough registers or memory available to unwind further Dec 28 10:38:45 eeesuse gdm[1676]: Dec 28 10:38:45 eeesuse gdm[1676]: Thread 1 (Thread 0xb72b3720 (LWP 1616)): Dec 28 10:38:45 eeesuse gdm[1676]: #0 0xb767543e in __waitpid_nocancel () from /lib/libpthread.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #1 0x08057d1d in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #2 0x08058129 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #3 <signal handler called> Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #4 0xb75288c5 in raise () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #5 0xb752a1d5 in abort () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #6 0xb76fe40e in g_assertion_message () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #7 0x0804f9df in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #8 0xb7117fc4 in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #9 0xb7118049 in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #10 0xb7118c2c in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #11 0xb7118dbc in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #12 0xb7119f4a in ?? () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #13 0xb711a721 in pam_sm_authenticate () from /lib/security/pam_winbind.so Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #14 0xb7852aa5 in ?? () from /lib/libpam.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #15 0xb78521c7 in pam_authenticate () from /lib/libpam.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #16 0x08051763 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #17 0xb76d4d10 in ?? () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #18 0xb76d8e2f in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #19 0xb76d9560 in ?? () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #20 0xb76d9b6b in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #21 0x0804c819 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #22 0xb7514003 in __libc_start_main () from /lib/libc.so.6 Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: #23 0x0804c8d1 in ?? () Dec 28 10:38:45 eeesuse gdm[1676]: No symbol table info available. Dec 28 10:38:45 eeesuse gdm[1676]: Backtrace stopped: Not enough registers or memory available to unwind further Dec 28 10:38:45 eeesuse gdm[1676]: A debugging session is active. Dec 28 10:38:45 eeesuse gdm[1676]: Dec 28 10:38:45 eeesuse gdm[1676]: #011Inferior 1 [process 1616] will be detached. Dec 28 10:38:45 eeesuse gdm[1676]: Dec 28 10:38:45 eeesuse gdm[1676]: Quit anyway? (y or n) [answered Y; input not from terminal] Dec 28 10:38:45 eeesuse gdm[1676]: ******************* END ********************************** -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c1 David Disseldorp <ddiss@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ddiss@suse.com, | |samba-maintainers@SuSE.de Component|Samba |GNOME AssignedTo|samba-maintainers@SuSE.de |bnc-team-gnome@forge.provo. | |novell.com QAContact|samba-maintainers@SuSE.de |qa@suse.de Severity|Normal |Major --- Comment #1 from David Disseldorp <ddiss@suse.com> 2012-01-04 14:42:50 UTC --- Thanks for the report Andre. It looks like the "Your password will expire in..." pam_conv message sent by the pam_winbind module is tripping an assert in GDM.
From /var/log/gdm/:0-slave.log.1: ERROR:gdm-session-direct.c:919:answer_pending_query: assertion failed: (session->priv->message_pending_reply != NULL)
Login via ssh under the same imminent password expiry condition is successful. Reassigning to the GDM team. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c2 David Disseldorp <ddiss@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|pam_winbind crashes when |gdm crashes on receiving a |the user password is about |pam_winbind user password |to expire |expiry message --- Comment #2 from David Disseldorp <ddiss@suse.com> 2012-01-04 15:16:47 UTC --- This bug results in GDM user lockout while password expiry is scheduled to occur prior to the warn_pwd_expire pam_winbind config setting, the default 14 days. A potential workaround is to decrease the warn_pwd_expire value. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c8 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |aduffeck@suse.com --- Comment #8 from Vincent Untz <vuntz@suse.com> 2012-01-13 14:41:20 UTC --- (In reply to comment #1)
From /var/log/gdm/:0-slave.log.1: ERROR:gdm-session-direct.c:919:answer_pending_query: assertion failed: (session->priv->message_pending_reply != NULL)
This assertion is not in the gdm code we have in 12.1 (3.2.0). Which version of gdm is this? It was there before, though -- could it be that you have an old gdm? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c9 --- Comment #9 from Andre Duffeck <aduffeck@suse.com> 2012-01-13 14:54:30 UTC --- Created an attachment (id=471153) --> (http://bugzilla.novell.com/attachment.cgi?id=471153) Here's the :0-slave.log from my friend's machine -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c10 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|aduffeck@suse.com | --- Comment #10 from Vincent Untz <vuntz@suse.com> 2012-01-13 15:09:12 UTC --- Ah, that's good info, thanks. So apparently pam_winbind sends a message of a type that is not handled: switch (query->msg_style) { case PAM_PROMPT_ECHO_ON: res = gdm_session_worker_ask_question (worker, utf8_msg, &user_answer); break; case PAM_PROMPT_ECHO_OFF: res = gdm_session_worker_ask_for_secret (worker, utf8_msg, &user_answer); break; case PAM_TEXT_INFO: res = gdm_session_worker_report_info (worker, utf8_msg); break; case PAM_ERROR_MSG: res = gdm_session_worker_report_problem (worker, utf8_msg); break; default: g_assert_not_reached (); break; } I'll look at the pam_winbind code to see which message it could be. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c11 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |aduffeck@suse.com --- Comment #11 from Vincent Untz <vuntz@suse.com> 2012-01-13 15:22:28 UTC --- Hrm, the "Your password will expire" message is PAM_TEXT_INFO, so that should be fine. Would it be possible to set [debug] Enable = true in /etc/gdm/custom.conf and attach a new log? We should details on the message that is crashing gdm this way. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c12 --- Comment #12 from Andre Duffeck <aduffeck@suse.com> 2012-01-13 22:26:42 UTC --- Created an attachment (id=471241) --> (http://bugzilla.novell.com/attachment.cgi?id=471241) more verbose log file -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c13 Andre Duffeck <aduffeck@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|aduffeck@suse.com | --- Comment #13 from Andre Duffeck <aduffeck@suse.com> 2012-01-13 22:27:26 UTC --- Logfile with debug enabled attached -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c14 --- Comment #14 from Vincent Untz <vuntz@suse.com> 2012-01-14 07:47:43 UTC --- Hrm, the new log file doesn't have more details. It could be that my configuration bit for debugging is wrong :/ I'll check that out at a better time than saturday morning... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c15 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |aduffeck@suse.com --- Comment #15 from Vincent Untz <vuntz@suse.com> 2012-01-19 17:20:12 UTC --- Based on what I see in bug 731867 comment 10, the config bit should work. Is gdm becoming verbose in /var/log/messages instead? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c16 Andre Duffeck <aduffeck@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|aduffeck@suse.com | --- Comment #16 from Andre Duffeck <aduffeck@suse.com> 2012-01-20 09:35:16 UTC --- Created an attachment (id=472027) --> (http://bugzilla.novell.com/attachment.cgi?id=472027) /var/log/messages containing the crash -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c18 --- Comment #18 from David Disseldorp <ddiss@suse.com> 2012-02-16 15:40:50 UTC --- pam_winbind sends "Do you want to change your password now?" messages as PAM_RADIO_TYPE. openSUSE 12.1 gdm does not currently support this msg_style. Would it be possible to have gdm ignore msg_style values, until support for this PAM_RADIO_TYPE is added? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c19 --- Comment #19 from David Disseldorp <ddiss@suse.com> 2012-02-16 15:45:47 UTC --- (In reply to comment #18)
Would it be possible to have gdm ignore msg_style values
That should read "ignore unknown msg_style values, rather than assert" -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c22 --- Comment #22 from David Liang <dliang@suse.com> 2012-03-01 08:17:18 UTC --- The patch for sle11 will popup a dialog with radios for the user to click, it seems a little wired with the upstream version. More codes should be done to make the interface consistent with opensuse12.1 or upstream. A simple solution is to reuse the ask_question method. Create new bug in the upstream, https://bugzilla.gnome.org/show_bug.cgi?id=671106 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c23 --- Comment #23 from David Liang <dliang@suse.com> 2012-03-06 08:21:36 UTC --- Created an attachment (id=479679) --> (http://bugzilla.novell.com/attachment.cgi?id=479679) patch for opensuse factory Add radio_info_query to gdm to support the PAM_RADIO_TYPE. Add the embed ui with 'yes' / 'no' radio buttons to the gdm-simple-greeter(extensions). So no popup dialog (like sle11) anymore. built in my repo: home:dliang:branches:GNOME:Factory > gdm The patch is for gdm, so if the greeter choose 'gnome-shell --gdm-mode', the radio type still will not be supported. gnome-shell patch is needed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=738757 https://bugzilla.novell.com/show_bug.cgi?id=738757#c24 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED InfoProvider|dliang@suse.com | Resolution| |NORESPONSE --- Comment #24 from Dominique Leuenberger <dimstar@opensuse.org> 2013-09-29 17:48:26 UTC --- Dear Reporter, Thank you for taking the time to report this bug and helping to make openSUSE better. We are sorry that we do not always have the capacity to look at all reported bugs in a timely manner. There have been many changes in openSUSE since the time you reported the bug and your problem may have been fixed with some of the updates. It would help us a lot if you could test it on a current, supported openSUSE version. When you test it and it is still an issue, kindly reopen this bug and move it to the tested version of openSUSE. Truly yours. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com