Red Hat Bugzilla – Bug 253036
32-bit pam_winbind.so incompatible with 64-bit winbindd
Last modified: 2012-07-26 09:43:27 EDT
Description of problem:
The 32-bit version of pam_winbind.so, needed for 32-bit pam-compatible
applications does not work on a system running a 64-bit winbind daemon.
Version-Release number of selected component (if applicable):
Setup a 32-bit, pam-compatible application to use pam_winbind.so on an x86_64
system. It will never successfully authenticate.
Steps to Reproduce:
1. Install 64-bit samba and samba-common
2. Setup winbindd to work in a 64-bit environment. Make sure wbinfo works
3. Install a 32-bit pam-aware app. I used VMware-server-1.0.3-44356.i386
4. Install 32-bit samba-common for 32-bit pam_winbind
5. Configure pam for this 32-bit app to use pam_winbind
Error messages in syslog
Authentication succeeds, where applicable
success messages in syslog
/etc/pam.d/vmware-authd: This works on a 32-bit machine
auth sufficient pam_unix.so shadow nullok
auth sufficient pam_winbind.so
auth required pam_unix_auth.so shadow nullok
account sufficient pam_unix.so
account required pam_unix_acct.so
Error messages in /var/log/messages:
winbindd: [2007/08/14 17:00:26, 0]
Invalid request size received: 2084
Reproducing this problem through pam is complex. The same problem can be
recreated, by using the 32-bit version of wbinfo. This program needs to be
extracted from the 32-bit rpm, as installing it will not have the 64-bit version
of wbinfo overwritten. Just type "wbinfo -u" using both 32-bit and 64-bit
versions to see the difference.
http://koji.fedoraproject.org/koji/buildinfo?buildID=21591 has the fix built
samba-3.0.26a-6.fc7 has been pushed to the Fedora 7 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
su -c 'yum --enablerepo=updates-testing update samba'
samba-3.0.26a-6.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.