ports/114825: pam module pam_abl not working

[Alex Keda]

>Number:         114825
>Category:       ports
>Synopsis:       pam module pam_abl not working
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jul 23 12:20:01 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Alex Keda
>Release:        6.2-STABLE
>Organization:
ussr
>Environment:
FreeBSD dag.biz.moskb.local 6.2-STABLE FreeBSD 6.2-STABLE #4: Fri Jul  6 19:46:42 MSD 2007     root at dag.biz.moskb.local:/usr/obj/usr/src/sys/C01  i386

>Description:
On compilation - warnings:
pwd
/usr/ports/security/pam_abl
dag# make
===>  WARNING: Vulnerability database out of date, checking anyway
===>  Extracting for pam_abl-0.2.3
=> MD5 Checksum OK for pam_abl-0.2.3.tar.gz.
=> SHA256 Checksum OK for pam_abl-0.2.3.tar.gz.
===>  Patching for pam_abl-0.2.3
===>  Applying FreeBSD patches for pam_abl-0.2.3
===>   pam_abl-0.2.3 depends on shared library: db-4.2.2 - found
===>  Configuring for pam_abl-0.2.3
===>  Building for pam_abl-0.2.3
cc -Wall -fPIC -I/usr/local/include -c pam_abl.c
pam_abl.c: In function `pam_sm_authenticate':
pam_abl.c:363: warning: passing arg 3 of `pam_get_data' from incompatible pointer type
cc -Wall -fPIC -I/usr/local/include -c log.c
cc -Wall -fPIC -I/usr/local/include -c config.c
cc -Wall -fPIC -I/usr/local/include -c rule.c
ld -x --shared -L/usr/local/lib -ldb-4.2 -lpthread -o pam_abl.so pam_abl.o log.o config.o rule.o
for d in tools ; do cd $d && make all && cd .. ; done
cc -Wall -I/usr/local/include -c log.c
/usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined
/usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined
/usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined
/usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined
/usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined
/usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined
cc -Wall -I/usr/local/include -c config.c
/usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined
/usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined
/usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined
/usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined
/usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined
/usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined
cc -Wall -I/usr/local/include -c rule.c
/usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined
/usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined
/usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined
/usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined
/usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined
/usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined
cc -Wall -I/usr/local/include -c pam_abl.c
/usr/include/security/pam_modules.h:57: warning: 'pam_sm_acct_mgmt' declared `static' but never defined
/usr/include/security/pam_modules.h:65: warning: 'pam_sm_authenticate' declared `static' but never defined
/usr/include/security/pam_modules.h:73: warning: 'pam_sm_chauthtok' declared `static' but never defined
/usr/include/security/pam_modules.h:81: warning: 'pam_sm_close_session' declared `static' but never defined
/usr/include/security/pam_modules.h:89: warning: 'pam_sm_open_session' declared `static' but never defined
/usr/include/security/pam_modules.h:97: warning: 'pam_sm_setcred' declared `static' but never defined
cc -L/usr/local/lib -ldb-4.2 -lpthread -o pam_abl log.o config.o rule.o pam_abl.o
==================
after installation I add to /etc/pam.d/sshd string:
auth required /usr/local/lib/pam_abl.so config=/usr/local/etc/pam_abl.conf

and tried login. On log i see before input incorerect password:
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_db=/var/db/pam_abl/hosts.db
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_purge=2d
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: host_rule=*:10/1h,30/1d
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_db=/var/db/pam_abl/users.db
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_purge=2d
Jul 23 16:19:46 dag pam_abl[86943]: /usr/local/etc/pam_abl.conf: user_rule=!root:10/1h,30/1d
Jul 23 16:19:46 dag pam_abl[86943]: Checking host 172.30.102.20
Jul 23 16:19:46 dag pam_abl[86943]: Checking user lissyara

after input incorrect password:

Jul 23 16:19:52 dag sshd[86941]: error: PAM: authentication error for lissyara from 172.30.102.20
Jul 23 16:19:52 dag kernel: Jul 23 16:19:52 dag sshd[86941]: error: PAM: authentication error for lissyara from 172.30.102.20
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_db=/var/db/pam_abl/hosts.db
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_purge=2d
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: host_rule=*:10/1h,30/1d
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_db=/var/db/pam_abl/users.db
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_purge=2d
Jul 23 16:19:52 dag pam_abl[86944]: /usr/local/etc/pam_abl.conf: user_rule=!root:10/1h,30/1d
Jul 23 16:19:52 dag pam_abl[86944]: Checking host 172.30.102.20
Jul 23 16:19:52 dag pam_abl[86944]: Checking user lissyara

=================
database files not created, user/hosts not locking.
=================
if I add this line twice - all successful login attempt cunt as fail and database created, and user/host locked :)
>How-To-Repeat:
always
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: