• Bug#1103923: missing "remote" pam config

    From Christof Meerwald@21:1/5 to All on Tue Apr 22 22:50:01 2025
    Package: login
    Version: 1:4.16.0-2+really2.41-4

    in login.c we have:

    rc = pam_start(cxt->remote ? "remote" : "login",

    so it's either using "login" or "remote" for pam_start, but the
    package only ships a login configuration for pam.

    The old login from 1:4.13+dfsg1-1+b1 always used "login" with pam, so
    this is a very unexpected change in default behaviour.


    Christof

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to All on Tue Apr 22 23:20:01 2025
    Hi,

    thank you for the report.

    * Christof Meerwald <cmeerw@cmeerw.org> [250422 22:42]:
    in login.c we have:

    rc = pam_start(cxt->remote ? "remote" : "login",

    so it's either using "login" or "remote" for pam_start, but the
    package only ships a login configuration for pam.

    Please provide instructions how to reproduce / test possible fixes.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Christof Meerwald@21:1/5 to Chris Hofstaedtler on Wed Apr 23 00:00:02 2025
    On Tue, Apr 22, 2025 at 11:08:37PM +0200, Chris Hofstaedtler wrote:
    Hi,

    thank you for the report.

    * Christof Meerwald <cmeerw@cmeerw.org> [250422 22:42]:
    in login.c we have:

    rc = pam_start(cxt->remote ? "remote" : "login",

    so it's either using "login" or "remote" for pam_start, but the
    package only ships a login configuration for pam.

    Please provide instructions how to reproduce / test possible fixes.

    Basically, you'll need to pass -h to login, but because of the vhangup
    feature that's now a bit more tricky to test directly.

    Installing telnetd (or telnetd-ssl) is likely the easiest option (I am
    using that via xinetd). Note that rsh-redone-server is still broken
    (see #1101703).

    I would then expect to have environment variables from
    /etc/environment set up when logging in via telnetd in the shell (but
    that's currently not the case as login is looking for a "remote" pam
    config that doesn't exist by default).


    Christof

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)