Re: [Cooker] Re: Cooker Login Fail after daily Update

[Vincent Danen]

* [2008-05-20 12:01:04 +0200] Moreno wrote:

> > > > > After the daily update of my Cooker machine all attempts to make a login fail.
> > > >
> > > > The problem is which urpmi have installed the packages and generated 2
> > > > rpmnew files but it do not have signalled this.
> > > >
> > > > I have replaced the /etc/login-def and /etc/pam.d/system-auth file
> > > > with the .rpmnew file and all return to work normally.
> > >
> > > Do you have msec installled? See
> > > <https://qa.mandriva.com/show_bug.cgi?id=29719>.
> >
> > That's not strictly related to msec, other config tools can modify pam
> > config files.
> >
> > But is it normal that pam_unix does not work anymore in the config
> > file? In the initial plan, it was said that pam_tcb was backwards
> > compatible with pam_unix, it does not seem to be the case...
> >
> > Anyway, I don't think we should force migration to pam_tcb in %post,
> > there's no real reason to handle .rpmnew files differently in this
> > package if pam_tcb is backwards compatible as you claim.
> >
> > --
> > Olivier Blin (blino) - Mandriva
>
> These are my configurations file

/etc/login.def should still work even without the TCB stuff.  login.def
is used when creating new accounts, so shouldn't prevent you from
logging in.  That's strictly pam-related.

Did you make changes to /etc/login.def?  I didn't think too many people
would have made changes to that file so I didn't worry about doing some
kind of "migration magic" in the spec to handle it, as I did with
system-auth (granted, that was in a pam update that came a few hours
after the original tcb-aware one came out).

--
Vincent Danen @ http://linsec.ca/

Attachment: pgp00078.pgp
Description: PGP signature