Mageia Bugzilla – Attachment 8167 Details for
Bug 18930
New users can not log in; "crypt_ra: Numerical result out of range" in log.
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
[patch]
pam: drop TCB support
pam.patch (text/plain), 2.30 KB, created by
Thierry Vignaud
on 2016-07-13 16:54:28 CEST
(
hide
)
Description:
pam: drop TCB support
Filename:
MIME Type:
Creator:
Thierry Vignaud
Created:
2016-07-13 16:54:28 CEST
Size:
2.30 KB
patch
obsolete
>Index: SOURCES/system-auth.pamd >=================================================================== >--- SOURCES/system-auth.pamd (révision 1041905) >+++ SOURCES/system-auth.pamd (copie de travail) >@@ -1,13 +1,14 @@ > #%PAM-1.0 > > auth required pam_env.so >-auth sufficient pam_tcb.so shadow nullok prefix=$2a$ count=8 >+auth sufficient pam_unix.so try_first_pass likeauth nullok >+ > auth required pam_deny.so > >-account required pam_tcb.so shadow >+account required pam_unix.so > > password required pam_cracklib.so try_first_pass retry=3 >-password sufficient pam_tcb.so use_authtok shadow write_to=shadow nullok prefix=$2a$ count=8 >+password sufficient pam_unix.so try_first_pass use_authtok nullok md5 shadow > password required pam_deny.so > > session optional pam_keyinit.so revoke >@@ -14,4 +15,4 @@ > session required pam_limits.so > session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid > -session optional pam_systemd.so >-session required pam_tcb.so >+session required pam_unix.so >Index: SPECS/pam.spec >=================================================================== >--- SPECS/pam.spec (révision 1041905) >+++ SPECS/pam.spec (copie de travail) >@@ -14,7 +14,7 @@ > Summary: A security tool which provides authentication for applications > Name: pam > Version: 1.3.0 >-Release: %mkrel 1 >+Release: %mkrel 1.1 > # The library is BSD licensed with option to relicense as GPLv2+ - this option is redundant > # as the BSD license allows that anyway. pam_timestamp and pam_console modules are GPLv2+, > License: BSD and GPLv2+ >@@ -66,11 +66,9 @@ > Requires(posttrans): systemd >= %{systemd_required_version} > Requires: cracklib-dicts > Requires: setup >= 2.7.12-2 >-Requires: pam_tcb >= 1.0.2-16 > Conflicts: initscripts < 3.94 > Requires(pre): rpm-helper > Requires(posttrans): coreutils >-Requires(posttrans): tcb >= 1.0.2-16 > BuildRequires: bison > BuildRequires: cracklib-devel > BuildRequires: flex >@@ -247,11 +245,7 @@ > if [ ! -a /var/log/tallylog ] ; then > install -m 600 /dev/null /var/log/tallylog > fi >-if [ -f /etc/login.defs ] && ! grep -q USE_TCB /etc/login.defs; then >- %{_sbindir}/set_tcb --auto --migrate >-fi > >- > %files -f Linux-PAM.lang > %doc NEWS > %docdir %{_docdir}/%{name}
Index: SOURCES/system-auth.pamd =================================================================== --- SOURCES/system-auth.pamd (révision 1041905) +++ SOURCES/system-auth.pamd (copie de travail) @@ -1,13 +1,14 @@ #%PAM-1.0 auth required pam_env.so -auth sufficient pam_tcb.so shadow nullok prefix=$2a$ count=8 +auth sufficient pam_unix.so try_first_pass likeauth nullok + auth required pam_deny.so -account required pam_tcb.so shadow +account required pam_unix.so password required pam_cracklib.so try_first_pass retry=3 -password sufficient pam_tcb.so use_authtok shadow write_to=shadow nullok prefix=$2a$ count=8 +password sufficient pam_unix.so try_first_pass use_authtok nullok md5 shadow password required pam_deny.so session optional pam_keyinit.so revoke @@ -14,4 +15,4 @@ session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid -session optional pam_systemd.so -session required pam_tcb.so +session required pam_unix.so Index: SPECS/pam.spec =================================================================== --- SPECS/pam.spec (révision 1041905) +++ SPECS/pam.spec (copie de travail) @@ -14,7 +14,7 @@ Summary: A security tool which provides authentication for applications Name: pam Version: 1.3.0 -Release: %mkrel 1 +Release: %mkrel 1.1 # The library is BSD licensed with option to relicense as GPLv2+ - this option is redundant # as the BSD license allows that anyway. pam_timestamp and pam_console modules are GPLv2+, License: BSD and GPLv2+ @@ -66,11 +66,9 @@ Requires(posttrans): systemd >= %{systemd_required_version} Requires: cracklib-dicts Requires: setup >= 2.7.12-2 -Requires: pam_tcb >= 1.0.2-16 Conflicts: initscripts < 3.94 Requires(pre): rpm-helper Requires(posttrans): coreutils -Requires(posttrans): tcb >= 1.0.2-16 BuildRequires: bison BuildRequires: cracklib-devel BuildRequires: flex @@ -247,11 +245,7 @@ if [ ! -a /var/log/tallylog ] ; then install -m 600 /dev/null /var/log/tallylog fi -if [ -f /etc/login.defs ] && ! grep -q USE_TCB /etc/login.defs; then - %{_sbindir}/set_tcb --auto --migrate -fi - %files -f Linux-PAM.lang %doc NEWS %docdir %{_docdir}/%{name}
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 18930
: 8167 |
8168