+++ This bug was initially created as a clone of Bug #168877 +++ Description of problem: I was updating the authconfig servers we are using on several systems with the same command and didn't notice that one of the systems was missing the pam_krb5 package. authconfig still went ahead and created the pam system-auth file with the following line in it: auth sufficient /lib/security/$ISA/pam_krb5afs.so use_first_pass tokens This completely broke the pam stack because this module did not exist and therefore even prevented root login from the console so it could not easily be fixed. System logs would contain errors like this for console login: Sep 20 14:29:03 services01 login: PAM unable to dlopen(/lib/security/$ISA/pam_krb5afs.so) Sep 20 14:29:03 services01 login: PAM [dlerror: /lib/security/../../lib/security/pam_krb5afs.so: cannot open shared object file: No such file or directory] Sep 20 14:29:03 services01 login: PAM adding faulty module: /lib/security/$ISA/pam_krb5afs.so Sep 20 14:29:07 services01 login: Module is unknown Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. Install a system without the pam_krb5 package. 2. After the install, rerun the authconfig command with options to enable krb5. 3. Try to log into the system. Actual Results: Login failed (even root from the console). Expected Results: authconfig should probably not be adding modules to the pam config which are not installed on the system because it results in a broken pam stack. Additional info:
Authconfig will now print warning in such case.