[Pkg-samba-maint] Bug#742678: libpam-winbind: AD authentication broken: PAM unable to dlopen(pam_winbind.so)

[Steve Langasek]

On Wed, Mar 26, 2014 at 09:27:38PM +0100, Robert Ramięga wrote:
>  Ok I think I kinda solved this. Sometime ago I was toying with sssd
> packages but had problem making it work and sssd and all related packages
> were still installed. I've just deinstalled:
>  ldap-utils (2.4.39-1) 
>  sssd-tools (1.11.4-1) 
>  sssd (1.11.4-1) 
>  sssd-proxy (1.11.4-1) 
>  sssd-ldap (1.11.4-1) 
>  sssd-krb5 (1.11.4-1) 
>  sssd-ipa (1.11.4-1) 
>  libipa-hbac0 (1.11.4-1) 
>  libnss-sss:amd64 (1.11.4-1) 
>  libpam-sss:amd64 (1.11.4-1) 
>  libpam-pwquality:amd64 (1.2.3-1) 
>  sssd-ad (1.11.4-1) 
>  sssd-ad-common (1.11.4-1) 
>  libsss-sudo (1.11.4-1) 
>  sssd-krb5-common (1.11.4-1) 
>  sssd-common (1.11.4-1) 
>  libsss-idmap0 (1.11.4-1) 
>  python-sss (1.11.4-1) 
>  libini-config3:amd64 (0.3.0.1-4) 
>  libbasicobjects0:amd64 (0.3.0.1-4) 
>  libcollection2:amd64 (0.3.0.1-4) 
>  libdhash1:amd64 (0.3.0.1-4) 
>  libpath-utils1:amd64 (0.3.0.1-4) 
>  libref-array1:amd64 (0.3.0.1-4) 

>  and now at least I can login there.
>  Somehow cronjobs still generate error message about missing
>  SAMBA_4.1.6_DEBIAN symbol 

Ok.  This is because the old version of the library is loaded in memory by
the application (in this case cron), and as a result the linker will try to
resolve symbols against the one already in memory.  Restarting cron should
be sufficient to resolve this.

The pam package itself takes care to restart services on upgrade to avoid
this problem; you seem to have run into a special case due to the
interaction between sssd and pam_winbind, I'm not sure which of these
packages should be handling it.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20140326/bb01afed/attachment.sig>