Bug 2468510

Summary: openvpn[]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
Product: [Fedora] Fedora Reporter: Frantisek Hanzlik <franta>
Component: openvpnAssignee: David Sommerseth <dazo>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 44CC: dazo, frank, huzaifas, kalevlember, steve
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-05-11 17:14:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Frantisek Hanzlik 2026-05-09 20:14:38 UTC
New F44 installation, OpenVPN log errors as:
May  9 20:26:39 ns openvpn[8]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
May  9 20:26:39 ns openvpn[8]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so
May  9 20:26:40 ns openvpn[8]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
May  9 20:26:40 ns openvpn[8]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so


Reproducible: Always




Additional Information:
In bugreport form, is not possible select liblastlog2 package (where is /usr/lib64/security/pam_lastlog2.so ) - is not there oferred

Also, maybe same bug is reported in 2419509 and 2453457

Comment 1 Frank Lichtenheld 2026-05-11 15:30:52 UTC
Yeah, pretty clearly https://bugzilla.redhat.com/show_bug.cgi?id=2453457 describes the same issue, just with a different program loading the library. Will look into whether we need to do anything or if this is a bug in pam_lastlog2.so. I assume the latter, but not sure, yet.

Comment 2 Frank Lichtenheld 2026-05-11 17:14:30 UTC
Seems like a clear bug in pam_lastlog2.so. All other pam modules are linked against libpam.so. As described in the linked ticket this was probably hidden before by the callers having the symbols, but the linker settings seem much more aggressive in F44 so that did go away. Marking this as a duplicate.

*** This bug has been marked as a duplicate of bug 2453457 ***