From root@karma.iats.missouri.edu  Fri Jan  3 14:54:38 2003
Return-Path: <root@karma.iats.missouri.edu>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EC00037B401
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  3 Jan 2003 14:54:38 -0800 (PST)
Received: from karma.iats.missouri.edu (karma.iats.missouri.edu [128.206.94.220])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4FA2C43EC5
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  3 Jan 2003 14:54:38 -0800 (PST)
	(envelope-from root@karma.iats.missouri.edu)
Received: from karma.iats.missouri.edu (localhost [127.0.0.1])
	by karma.iats.missouri.edu (8.12.6/8.12.6) with ESMTP id h03MsaJX000743
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 3 Jan 2003 16:54:36 -0600 (CST)
	(envelope-from root@karma.iats.missouri.edu)
Received: (from root@localhost)
	by karma.iats.missouri.edu (8.12.6/8.12.6/Submit) id h03MsZww000742;
	Fri, 3 Jan 2003 16:54:35 -0600 (CST)
Message-Id: <200301032254.h03MsZww000742@karma.iats.missouri.edu>
Date: Fri, 3 Jan 2003 16:54:35 -0600 (CST)
From: Charlie & <root@karma.iats.missouri.edu>
Reply-To: Charlie & <root@karma.iats.missouri.edu>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Login with pam_krb5 results in signal 11
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         46742
>Category:       bin
>Synopsis:       Login with pam_krb5 results in signal 11
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    des
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jan 03 15:00:16 PST 2003
>Closed-Date:    Tue Mar 11 11:42:52 PST 2003
>Last-Modified:  Tue Mar 11 11:42:52 PST 2003
>Originator:     Ryan Dooley <dooleyr@missouri.edu>
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
University of Missouri - Columbia
>Environment:
System: FreeBSD karma.iats.missouri.edu 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Fri Jan 3 15:52:20 CST 2003 root@karma.iats.missouri.edu:/usr/src/sys/i386/compile/KARMA i386


>Description:

A non-root user who wishes to login to a 5-CURRENT system authenticates 
correctly but the login(1) exits with a signal 11.

>How-To-Repeat:

Install MIT kerberos 1.2.7, pam_krb5 1.0.3 on a -CURRENT system with the 
following /etc/pam.d/login script.


#
# $FreeBSD: src/etc/pam.d/login,v 1.11 2002/05/08 00:33:02 des Exp $
#
# PAM configuration for the "login" service
#

# auth
auth		required	pam_nologin.so	no_warn
auth		sufficient	pam_self.so	no_warn
auth		sufficient	pam_opie.so	no_warn no_fake_prompts
auth		requisite	pam_opieaccess.so	no_warn
#auth		sufficient	pam_kerberosIV.so	no_warn try_first_pass
auth		sufficient	pam_krb5.so	no_warn try_first_pass missing_keytab_ok
#auth		sufficient	pam_ssh.so	no_warn try_first_pass
auth		required	pam_unix.so	no_warn try_first_pass nullok

# account
#account	required	pam_kerberosIV.so
account		required	pam_krb5.so
account		required	pam_login_access.so
account		required	pam_securetty.so
account		required	pam_unix.so

# session
#session	required	pam_kerberosIV.so
session		required	pam_krb5.so
#session	required	pam_ssh.so
session		required	pam_lastlog.so	no_fail

# password
#password	sufficient	pam_kerberosIV.so	no_warn try_first_pass
password	sufficient	pam_krb5.so	no_warn try_first_pass
password	required	pam_unix.so	no_warn try_first_pass

>Fix:

No fix.

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->des 
Responsible-Changed-By: johan 
Responsible-Changed-When: Mon Feb 3 13:02:25 PST 2003 
Responsible-Changed-Why:  
Over to PAM guru. Please assign this to the kerb5 folks 
if it's not a PAM problem. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=46742 

From: Dag-Erling Smorgrav <des@ofug.org>
To: freebsd-gnats-submit@freebsd.org
Cc:  
Subject: Re: bin/46742: Login with pam_krb5 results in signal 11
Date: Mon, 03 Feb 2003 22:40:36 +0100

 Is there any reason why you aren't using the versions of Kerberos and
 pam_krb5 which are provided with the system?
 
 DES
 -- 
 Dag-Erling Smorgrav - des@ofug.org
State-Changed-From-To: open->closed 
State-Changed-By: des 
State-Changed-When: Tue Mar 11 11:42:51 PST 2003 
State-Changed-Why:  
Feedback timeout. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=46742 
>Unformatted:
