[Pkg-samba-maint] Bug#601667: libpam-smbpass migrate breaks su (squeeze)

[Steve Langasek]

On Sat, Nov 13, 2010 at 10:44:05AM +0100, Hanspeter Kunz wrote:
> On Fri, 2010-11-12 at 21:20 -0800, Steve Langasek wrote:
> > What are the full contents of /etc/pam.d/common-auth on this system?

> auth [success=2 default=ignore] pam_unix.so nullok_secure
> auth [success=1 default=ignore] pam_ldap.so use_first_pass
> auth requisite                  pam_deny.so
> auth required                   pam_permit.so
> #auth optional                  pam_smbpass.so migrate

> > Do the users you're trying to su to have entries in passdb.tdb?  Do they
> > have passwords in passdb.tdb?

> I have an entry for root but not for other users.

> Anyway, I am storing the samba passwords in ldap, so I guess passdb.tdb
> is not used anyway. 

Ah.  Then this could be caused by bug #579647 (which should be a bug against
gcrypt, I'm not sure why I can only now find the bug filed against
openldap).  Are you using libnss-ldap?  Could you test using libnss-ldapd
instead?

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20101113/e7778e5a/attachment.pgp>