[Pkg-shadow-devel] Bug#472986: /bin/su: su segfaults with libpam-p11 activated in /etc/pam.d/common-auth

[Jerome Alet]

Package: login
Version: 1:4.1.0-2
Severity: important
File: /bin/su


When trying to activate libpam-p11 (v0.1.3-1) for login, I've modified 
/etc/pam.d/common-auth to contain :

--- CUT ---
auth    required        pam_p11_opensc.so /usr/lib/opensc-pkcs11.so
#auth   required        pam_unix.so nullok_secure
--- CUT ---

Then when doing an su, there's a segfault :

--- CUT ---
jerome at houlala:~$ su
su: Authentication service cannot retrieve authentication info
Erreur de segmentation
jerome at houlala:~$
--- CUT ---

I can't login either but probably for other reasons.

I'm using a Rainbow iKey3000 USB token with opensc and openct
(stock Debian packages) and pkcs11-tool and pkcs15-tool both
work fine.

The segfault appears even if I copy ~jerome/.eid/authorized_certificates
into ~root/.eid/authorized_certificates, although in this case
the token's password is asked.

hth

Jerome Alet

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages login depends on:
ii  libc6                         2.7-9      GNU C Library: Shared libraries
ii  libpam-modules                0.99.7.1-6 Pluggable Authentication Modules f
ii  libpam-runtime                0.99.7.1-6 Runtime support for the PAM librar
ii  libpam0g                      0.99.7.1-6 Pluggable Authentication Modules l

login recommends no packages.

-- no debconf information