[Bug 700954] New: Deficient PAM configuration files installed for XEN guest
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=700954 https://bugzilla.novell.com/show_bug.cgi?id=700954#c0 Summary: Deficient PAM configuration files installed for XEN guest Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: x86-64 OS/Version: openSUSE 11.4 Status: NEW Severity: Major Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: Willy.Weisz@univie.ac.at QAContact: jsrain@novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 After installing an openSuSE 11.4 XEN guest with YaST I couldn't login to it via the graphical console in the XEN host, neither as root nor as the user defined during the installation. I also couldn't login via ssh using a password. Then I tried using the serial console: I could login without entering a password!!! Then I installed a public user key from a remote host into ssh/authorized_keys, and so I could ssh into the guest from that remote host. A third problem was that I couldn't change a password: I got an Authentication Token Manipulation Error. When looking into /var/log/messages I discovered that all my problems were PAM-related. Then I stumbled over bug 697670 which gave me the clue what to look for: Missing entries in /etc/pam.d/common-xxx files. common-password an common-auth were missing entries that are present in the corresponding .rpmnew files; in both cases i.a. the required module pam_unix2.so was left out. This is also true for common-session, but I'm unaware whether this causes problems too. Moving the 2 PAM configuration files with the corresponding .rpmnew ones solved all the problems described above. So please correct the XEN guest installation process!!!! Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=700954
https://bugzilla.novell.com/show_bug.cgi?id=700954#c1
zj jia
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=700954
https://bugzilla.novell.com/show_bug.cgi?id=700954#c2
Willy Weisz
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=700954
https://bugzilla.novell.com/show_bug.cgi?id=700954#c
zj jia
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=700954
https://bugzilla.novell.com/show_bug.cgi?id=700954#c3
Jiří Suchomel
participants (1)
-
bugzilla_noreply@novell.com