https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c1 --- Comment #1 from John Pemberton 2012-01-12 01:52:45 UTC --- Created an attachment (id=470825) --> (http://bugzilla.novell.com/attachment.cgi?id=470825) Original versions of /etc/pam.d/*-pc files in BZIP2'd tar file. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com Component|Security |Installation AssignedTo|security-team@suse.de |bnc-team-screening@forge.pr | |ovo.novell.com QAContact|qa@suse.de |jsrain@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c3 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |Pemberton.John.M@gmail.com --- Comment #3 from Michael Calmer 2012-01-23 10:31:01 UTC --- It looks like the files common-account-pc, common-passwd-pc and common-session-pc contains random data or data from other files. Please try the following now. Check, if there are still symbolic links in /etc/pam.d/ from common-* to common-*-pc. If yes, please try to execute: $> pam-config -a --pam-debug Now check, if the common-*-pc files still contains a valid pam configuration or if there is again something broken. You can disable pam-debug with $> pam-config -d --pam-debug This command is used to configure pam and enabling/disabling debug is to let pam-config re-write the *-pc files again. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c5 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |Pemberton.John.M@gmail.com --- Comment #5 from Michael Calmer 2012-01-24 08:57:30 UTC --- Ok. So I would say, the random data looks like a filesystem or hardware problem. The tools seems to work (also yast simply call pam-config). Maybe simply "bad luck". About the pam_apparmor thing: It seems you have configured pam_apparmor but you have not installed the package. Please try to install "zypper in pam_apparmor" (I hope it still exists in 12.1.) or disable it (call "pam-config -d --apparmor"). In my 11.4 pam configuration it is not configured. Have you enabled apparmor somewere? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c7 --- Comment #7 from Michael Calmer 2012-01-25 10:32:43 UTC --- (In reply to comment #6)

(In reply to comment #5)

re - pam_apparmor: OK, so if I understand you correctly, copying the pam config. files from 11.4, caused the inconsistency?

yes.

I executed this on 12.1:

rpm -q --whatprovides /etc/pam.d/common-account-pc

then attempted to re-install the package that seems to contains the proper 12.1 default config. files:

zypper in -f pam-config-0.79-5.1.2.x86_64

which didn't appear to complain. Yet, app_armor is still there.

How can I go about re-installing the default 12.1 pam config. files?

That's a little bit tricky. The default configuration is in the "pam" package. It package "common-*" files, without the "-pc". If pam-config is installed it called in %post pam-config --debug --initialize or pam-config --debug --update (if /etc/pam.d/common-auth-pc exists) These commands read the common-* files, generate the *-pc files and create links from common-* to common-*-pc So you can find the default config in the pam package. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=740873 https://bugzilla.novell.com/show_bug.cgi?id=740873#c9 John Pemberton changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #9 from John Pemberton 2012-01-26 02:03:51 UTC --- Closing this ticket, marking as resolved, because those "artifacts" of the resulting issue, that are easy to document, were overcome. That's not to say that some underlying problem, was fixed. Please note: https://bugzilla.novell.com/show_bug.cgi?id=733273 sounds like it might be somewhat similar to the kexec issue I had. Only in my case, no activity LED's were flashing, there was no response to a keyboard based attempt to shut the system down gracefully. I can't prove that something relating to the use of kexec during the automated first "phase" of the installation is what led to corrupted blocks on the disk drive, "glitches" are not impossible, but there are no I/O errors reported in the logs, S.M.A.R.T. was apparently enabled and no problems were reported. Yet, if what showed up through the use of PAM, was caused by a different problem, then it's probably more appropriate to investigate and track it under the other designation. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.