[Pkg-samba-maint] Bug#742678: libpam-winbind: AD authentication broken: PAM unable to dlopen(pam_winbind.so)

[Steve Langasek]

COn Wed, Mar 26, 2014 at 10:09:57AM +0100, Robert Ramięga wrote:
> Package: libpam-winbind
> Version: 2:4.1.6+dfsg-1
> Severity: important

> After last upgrade of samba I cannot login using ActiveDirectory account.
> All I get in logs is:

> PAM unable to dlopen(pam_winbind.so):
> /usr/lib/x86_64-linux-gnu/samba/libwinbind-client.so.0: version
> `SAMBA_4.1.6_DEBIAN' not found (required by
> /usr/lib/x86_64-linux-gnu/libwbclient.so.0)
> 
> PAM adding faulty module: pam_winbind.so
> 
> fatal: Access denied for user XXXX by PAM account configuration [preauth]

> I did not change any config files for quite some time (nor smb.conf
> neither pam configuration)

You appear to have local files installed on disk that are interfering with
the package-provided files.  Your bug report shows that you have
libwbclient0 2:4.1.6+dfsg-1 installed, which provides this file.  However,
the file from the package does have the necessary version:

$ objdump -p /usr/lib/x86_64-linux-gnu/samba/libwinbind-client.so.0 | grep SAMBA_4.1.6
2 0x00 0x04ae5a8e SAMBA_4.1.6_DEBIAN
$ 

You should double-check why this file on your system doesn't match the one
from the archive.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20140326/71b1ee56/attachment.sig>