[Pkg-openssl-devel] Bug#706474: Bug#706474: libssl1.0.0: saslauthd fails with "PAM unable to dlopen(pam_mysql.so)"

[Kurt Roeckx]

On Tue, Apr 30, 2013 at 04:24:03PM +0100, Simon Hobson wrote:
> Package: libssl1.0.0
> Version: 1.0.1e-2
> Severity: important
> 
> Dear Maintainer,
> 
> With version 1.0.1e-2 installed, authentication fails. Postfix is configured to use PAM to authenticate users against a MySQL database with libsasl2-2, libsasl2-modules (both version 2.1.25.dfsg1-6), and courier-authdaemon, courier-authlib, courier-authlib-mysql (all version 0.63.0-6+b1).
> Downgrading to version 1.0.1c-4 resolves the issue.
> 
> The following is logged in auth.log when debugging turned up :
> saslauthd[2652]: PAM unable to dlopen(pam_mysql.so): /usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0: version `OPENSSL_1.0.1d' not found (required by /usr/lib/i386-linux-gnu/i686/cmov/libssl.so.1.0.0)
> saslauthd[2652]: PAM adding faulty module: pam_mysql.so
> saslauthd[2652]: DEBUG: auth_pam: pam_authenticate failed: Module is unknown
> saslauthd[2652]: do_auth         : auth failure: [user=*****] [service=smtp] [realm=*****] [mech=pam] [reason=PAM auth error]

Version OPENSSL_1.0.1d is in the file
/usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0 here.

I have no idea what you did, but libcrypto.so.1.0.0 and libssl.so.1.0.0
come from the same package, and they should either both have
that version or should both not have that version.


Kurt