ports/142740: x11/wdm: in openpam_dispatch(): pam_nologin.so: no pam_sm_authenticate() / pam_sm_setcred()

[martinko]

>Number:         142740
>Category:       ports
>Synopsis:       x11/wdm: in openpam_dispatch(): pam_nologin.so: no pam_sm_authenticate() / pam_sm_setcred()
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jan 12 10:40:01 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     martinko
>Release:        8.0-RELEASE-p2
>Organization:
>Environment:
FreeBSD mb-aw1n-bsd 8.0-RELEASE-p2 FreeBSD 8.0-RELEASE-p2 #0: Tue Jan  5 16:02:27 UTC 2010     root at i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  i386
>Description:
Since moving from 6.4 to 8.0 I can see the following in /var/log/messages:

Jan 8 09:39:04 mb-aw1n-bsd : in openpam_dispatch(): pam_nologin.so: no pam_sm_authenticate()
Jan 8 09:39:04 mb-aw1n-bsd : in openpam_dispatch(): pam_nologin.so: no pam_sm_setcred()

It is triggered by x11/wdm port's wdm.pam configuration that has not been updated to reflect changes in pam_nologin(8) introduced with FreeBSD 7.0.
>How-To-Repeat:
Log in/out using WDM and check /var/log/messages.
>Fix:


Patch attached with submission follows:

--- wdm.pam~	2002-10-07 09:15:50.000000000 +0200
+++ wdm.pam	2010-01-12 10:54:22.000000000 +0100
@@ -3,13 +3,13 @@
 #
 
 # auth
-auth		required	pam_nologin.so	no_warn
 #auth		sufficient	pam_kerberosIV.so	no_warn try_first_pass
 #auth		sufficient	pam_krb5.so	no_warn try_first_pass
 #auth		sufficient	pam_ssh.so	no_warn try_first_pass
 auth		required	pam_unix.so	no_warn try_first_pass
 
 # account
+account		required	pam_nologin.so
 #account	required	pam_kerberosIV.so
 #account	required	pam_krb5.so
 account		required	pam_unix.so


>Release-Note:
>Audit-Trail:
>Unformatted: