OpenPAM Figwort broke PAM modules from ports

Jeremie Le Hen jeremie at
Mon Jun 27 13:04:37 GMT 2005

Hi Dag-Erling,

> > This prevents PAM modules installed in /usr/local/lib from being
> > dlopen(3)'d.  I'm not sure whether FreeBSD really wants this new
> > ``feature'' or not, but actually I think this needs a note in
> > src/UPDATING to be issued, explaining that PAM modules installed from
> > ports need to be specified with their full path now.
> They always did.

With all respect I owe you you, the last upgrade of my -CURRENT box
constrained me to use the following patch to make
work again :
    --- login.old	Mon Jun 27 16:13:34 2005
    +++ login	Mon Jun 27 01:12:30 2005
    @@ -6,7 +6,7 @@
     # auth
     auth		required		no_warn
    -auth		sufficient	no_root
    +auth		sufficient	/usr/local/lib/	no_root
     auth		sufficient		no_warn
     auth		include		system

It can be verified by hacking src/contrib/openpam/lib/openpam_dynamic.c
(this trivially reverts the diff I posted in my previous email) :
    Index: openpam_dynamic.c
    RCS file: /nfs/donald/repo/FreeBSD/src/contrib/openpam/lib/openpam_dynamic.c,v
    retrieving revision
    diff -u -r1.1.1.8 openpam_dynamic.c
    --- openpam_dynamic.c	17 Jun 2005 08:11:42 -0000
    +++ openpam_dynamic.c	27 Jun 2005 14:16:45 -0000
    @@ -71,6 +71,7 @@
     		prefix = OPENPAM_MODULES_DIR;
     		prefix = "";
    +	prefix = "";
     	/* try versioned module first, then unversioned module */
     	if (asprintf(&vpath, "%s%s.%d", prefix, path, LIB_MAJ) < 0)

Compiling libpam with this patch allows me to use
without specifying its full path, like it was before the upgrade to
OpenPAM Figwort.  I think this is due to rc.d/ldconfig default settings
which add the content of /usr/local/lib into rtld(1) standard hints file.
Now that the path is fully specified in libpam, this doesn't work any
longer.  It would be nice to have a note in src/UPDATING about this.

Best regards,
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >

More information about the freebsd-ports mailing list