pam_ssh.so installed in wrong directory

Bug #848050 reported by Dirk Heinrichs
62
This bug affects 12 people
Affects Status Importance Assigned to Milestone
libpam-ssh (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

The package libpam-ssh 1.92-14ubuntu1 from Oneiric Ocelot installs pam_ssh.so into /usr/lib instead of /lib/security. It's thus not found by PAM and no ssh-agent is started and no ssh key decrypted. As a workaround, I created a symlink to make it work.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libpam-ssh 1.92-14ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-11.17-generic 3.0.4
Uname: Linux 3.0.0-11-generic x86_64
NonfreeKernelModules: openafs
ApportVersion: 1.22.1-0ubuntu2
Architecture: amd64
Date: Mon Sep 12 18:35:32 2011
SourcePackage: libpam-ssh
UpgradeStatus: Upgraded to oneiric on 2011-09-05 (6 days ago)

Revision history for this message
Dirk Heinrichs (dirk-heinrichs) wrote :
Revision history for this message
Dirk Heinrichs (dirk-heinrichs) wrote :

Not long to go anymore until Oneiric will be released...

Revision history for this message
Dirk Heinrichs (dirk-heinrichs) wrote :

Here's the diff between the Ubuntu version and the original (working!) version from Debian:

diff -r libpam-ssh-1.92/debian/rules libpam-ssh-1.92-debian/debian/rules
54c54
< libtool --quiet --finish /usr/lib/
---
> libtool --quiet --finish $(destdir)/lib/security/

This ensures that pam_ssh.so is installed into the correct directory.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in libpam-ssh (Ubuntu):
status: New → Confirmed
Revision history for this message
Steffen (lassahn) wrote :

This affects me as well. I tried to find out why the change to the build file mentioned in comment #3 was made but all it said in the comment was "fixed FTBFS". I think what needs to be done is to decide wether pam_ssh.so actually should be in /usr/lib (which I doubt). If yes then at a symlink should be created at install time from /lib/security as mentioned in the description (thank you for the solution Dirk). If not the file (and probably pam_ssh.la as well) should move back to /lib/security. As it is right now the package is broken as it does not work.

Revision history for this message
Robert Gerlach (khnz) wrote :

The Ubuntu fix is wrong. /usr/lib is used because /lib/security didn't exists in the build environment (see aclocal.m4 line 63). Furthermore configure must fail if ISADIR is enabled in pam. Specifying "--with-pam-libdir" fixed it.

--- libpam-ssh-1.92/debian/rules 2011-08-20 16:51:26.000000001 +0200
+++ libpam-ssh-1.92.fix/debian/rules 2011-11-30 12:14:27.000000001 +0100
@@ -21,6 +21,7 @@
        --mandir=/usr/share/man \
        --infodir=/usr/share/info \
        --libexecdir=/usr/lib \
+ --with-pam-dir=/lib/$(DEB_BUILD_GNU_TYPE)/security \
        --build $(DEB_BUILD_GNU_TYPE)
 ifneq ($(DEB_BUILD_GNU_TYPE), $(DEB_HOST_GNU_TYPE))
        config_flags += --host $(DEB_HOST_GNU_TYPE)
@@ -51,8 +52,8 @@
        dh_testroot
        dh_prep
        $(MAKE) install DESTDIR=$(destdir)
- libtool --quiet --finish /usr/lib/
- rm -f $(destdir)/lib/security/pam_ssh.la
+ libtool --quiet --finish $(destdir)/lib/$(DEB_BUILD_GNU_TYPE)/security
+ rm -f $(destdir)/lib/$(DEB_BUILD_GNU_TYPE)/security/pam_ssh.la
        install -D -m 644 debian/pam-auth-update.silent-ssh-single-sign-on \
                 $(destdir)/usr/share/pam-configs/silent-ssh-single-sign-on
        touch $@

Revision history for this message
Dirk Heinrichs (dirk-heinrichs) wrote :

Meanwhile, the package seems to have been removed from Precise. Please re-add it, since it seems to be the only reliable way to start an ssh-agent at login time when user's home directories are in AFS.

Revision history for this message
jmalter (joerg4711) wrote :

The same in Quantal, please re-add the package

Revision history for this message
Colin Watson (cjwatson) wrote :

libpam-ssh is on its way back into raring now, thanks to its reintroduction into Debian unstable. I've checked that the new package (1.92-15) builds cleanly and has a sensible path for pam_ssh.so.

Changed in libpam-ssh (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.