Bug 1336774

Summary:	Segfault locks us out of the servers
Product:	[Fedora] Fedora EPEL	Reporter:	D.S. Ljungmark <spider>
Component:	pam_yubico	Assignee:	Nick Bebout <nb>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	el6	CC:	dennis, maxim, nb, oliver
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:
Fixed In Version:	pam_yubico-2.23-1.fc24 pam_yubico-2.23-1.fc22 pam_yubico-2.23-1.fc23 pam_yubico-2.23-1.el6 pam_yubico-2.23-1.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-06-23 17:54:31 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description D.S. Ljungmark 2016-05-17 12:31:44 UTC

Description of problem:

Since the update to pam_yubico-2.21-3.el6 +  ykclient-2.15-1.el6 we cannot access our x86_64 bounce server anymore.

This causes some slight issues as we cannot access any of our infrastructure remote, at all.



Version-Release number of selected component (if applicable):
2.21-3.el6 / 2.15-1.el6

How reproducible:
Attempts to ssh into machines without ControlMaster fails


Steps to Reproduce:
1. configure pam_yubico as required
2. install update
3. be locked out of machines

Actual results:
Locked out of  our el6 environments

Expected results:
Functional environments

Additional info:
This is a bit of a headache.

Comment 1 Oliver Ilian 2016-05-17 12:35:43 UTC

Is downgrading pam_yubico helping to solve that issue as a workaround?

Comment 2 D.S. Ljungmark 2016-05-17 13:14:32 UTC

Manually overriding with:

https://kojipkgs.fedoraproject.org//packages/pam_yubico/2.19/1.el6/x86_64/pam_yubico-2.19-1.el6.x86_64.rpm 
https://kojipkgs.fedoraproject.org//packages/ykclient/2.14/1.el6/x86_64/ykclient-2.14-1.el6.x86_64.rpm



Gives access back to the systems

`yum downgrade` or `yum history undo` doesn't work since the package is missing.


The pain is getting these downgrades out to machines once you're locked out.

Comment 3 D.S. Ljungmark 2016-05-17 13:15:26 UTC

It's not enough to just downgrade one of the packages, both have to be up/down-graded in lockstep.

Comment 4 Fedora Update System 2016-05-31 09:52:29 UTC

pam_yubico-2.22-1.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6b1a26de10

Comment 5 Fedora Update System 2016-05-31 09:52:49 UTC

pam_yubico-2.22-1.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e19bc36ef

Comment 6 Fedora Update System 2016-05-31 09:53:01 UTC

pam_yubico-2.22-1.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-447da92569

Comment 7 Fedora Update System 2016-05-31 09:53:13 UTC

pam_yubico-2.22-1.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2016-ae2468303f

Comment 8 Fedora Update System 2016-05-31 20:50:35 UTC

pam_yubico-2.22-1.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6b1a26de10

Comment 9 Fedora Update System 2016-05-31 20:53:01 UTC

pam_yubico-2.22-1.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-ae2468303f

Comment 10 Fedora Update System 2016-05-31 20:54:53 UTC

pam_yubico-2.22-1.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-447da92569

Comment 11 Fedora Update System 2016-06-01 08:29:23 UTC

pam_yubico-2.22-1.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e19bc36ef

Comment 12 D.S. Ljungmark 2016-06-07 12:34:33 UTC

I still don't see a pushed update for this for Epel6. 

the ON_QA tag seems to be wrong.

Comment 13 Fedora Update System 2016-06-07 14:39:05 UTC

pam_yubico-2.22-2.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-d121abcfb2

Comment 14 Fedora Update System 2016-06-07 14:39:20 UTC

pam_yubico-2.22-2.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-e6f1e3081d

Comment 15 Fedora Update System 2016-06-07 14:39:32 UTC

pam_yubico-2.22-2.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2016-06b2c329a7

Comment 16 Fedora Update System 2016-06-07 14:39:43 UTC

pam_yubico-2.22-2.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dbf8e71b1a

Comment 17 Fedora Update System 2016-06-07 18:53:21 UTC

pam_yubico-2.22-2.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-d121abcfb2

Comment 18 Fedora Update System 2016-06-08 02:23:30 UTC

pam_yubico-2.22-2.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-06b2c329a7

Comment 19 Fedora Update System 2016-06-08 02:23:51 UTC

pam_yubico-2.22-2.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-e6f1e3081d

Comment 20 Fedora Update System 2016-06-08 05:48:03 UTC

pam_yubico-2.22-2.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dbf8e71b1a

Comment 21 Fedora Update System 2016-06-15 13:25:16 UTC

pam_yubico-2.23-1.el6 has been submitted as an update to Fedora EPEL 6. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-86a7069446

Comment 22 Fedora Update System 2016-06-15 13:25:42 UTC

pam_yubico-2.23-1.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c20c1235f2

Comment 23 Fedora Update System 2016-06-15 13:25:58 UTC

pam_yubico-2.23-1.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-a08da9fef1

Comment 24 Fedora Update System 2016-06-15 13:26:12 UTC

pam_yubico-2.23-1.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-1f44279a51

Comment 25 Fedora Update System 2016-06-15 13:26:28 UTC

pam_yubico-2.23-1.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b27797fa4

Comment 26 D.S. Ljungmark 2016-06-15 15:23:30 UTC

Bohdi doesn't let me comment, sadly.

pam_yubico-2.23-1.el6 has been submitted as an update to Fedora EPEL 6. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-86a7069446


Solves the Segfault problem for us!

Comment 27 Fedora Update System 2016-06-15 16:55:47 UTC

pam_yubico-2.23-1.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-1f44279a51

Comment 28 Fedora Update System 2016-06-15 17:24:33 UTC

pam_yubico-2.23-1.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b27797fa4

Comment 29 Fedora Update System 2016-06-15 17:27:04 UTC

pam_yubico-2.23-1.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-a08da9fef1

Comment 30 Fedora Update System 2016-06-16 15:18:36 UTC

pam_yubico-2.23-1.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c20c1235f2

Comment 31 Fedora Update System 2016-06-16 15:19:05 UTC

pam_yubico-2.23-1.el6 has been pushed to the Fedora EPEL 6 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-86a7069446

Comment 32 Fedora Update System 2016-06-23 17:54:20 UTC

pam_yubico-2.23-1.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.

Comment 33 Fedora Update System 2016-06-24 01:50:57 UTC

pam_yubico-2.23-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.

Comment 34 Fedora Update System 2016-06-24 01:56:23 UTC

pam_yubico-2.23-1.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.

Comment 35 Fedora Update System 2016-07-02 16:19:25 UTC

pam_yubico-2.23-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.

Comment 36 Fedora Update System 2016-07-02 23:49:37 UTC

pam_yubico-2.23-1.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.