Bug 36864 - pam_access not compiled with NIS netgroup support
pam_access not compiled with NIS netgroup support
Status: CLOSED RAWHIDE
Product: Red Hat Linux
Classification: Retired
Component: pam (Show other bugs)
7.1
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Nalin Dahyabhai
Aaron Brown
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2001-04-20 13:46 EDT by Seth Vidal
Modified: 2007-04-18 12:32 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2001-06-18 10:42:04 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
patch pam-access's makefile to include linking to libnsl (333 bytes, patch)
2001-06-18 10:42 EDT, Seth Vidal
no flags Details | Diff

  None (edit)
Description Seth Vidal 2001-04-20 13:46:33 EDT
in /etc/security/access.conf it says that nis support for netgroup
allow/denies is enabled.

But in the srpm for pam its not -DNIS needs to be defined in the pam.spec
when building pam_access to allow it.

Otherwise a line like:

-:ALL EXCEPT @NETGROUPTEST:ALL 
in access.conf will fail to allow members of @NETGROUPTEST

you get this error in the logs:
pam_access[10135]: NIS netgroup support not configured

an errata for that might be in order.


-sv
Comment 1 Seth Vidal 2001-06-15 18:42:02 EDT
ok so I rebuilt it with -DNIS and netgroup then works.

however, referencing normal groups from w/i /etc/security/access.conf after
you've added the pam_access line into system-auth gets you this error:

login: PAM unable to dlopen(/lib/security/pam_access.so)
login: PAM [dlerror: /lib/security/pam_access.so: undefined symbol:
yp_get_default_domain]



I'l see what I can figure out but it would be nice to have normal yp-based
groups and netgroups working.

-sv


Comment 2 Seth Vidal 2001-06-18 10:41:17 EDT
all happy now. pam_access needed to be linked to libnsl - now its correct.
the attached patch file applied to pam will make it work. This might not be the
best way to do it but it seemed correct from how the Makefile read.
Comment 3 Seth Vidal 2001-06-18 10:42:00 EDT
Created attachment 21247 [details]
patch pam-access's makefile to include linking to libnsl
Comment 4 Nalin Dahyabhai 2001-08-30 20:56:52 EDT
Fixing in pam-0.75-10 and later.  Thanks!

Note You need to log in before you can comment on or make changes to this bug.