View Issue Details

IDProjectCategoryView StatusLast Update
0001144bareos-core[All Projects] directorpublic2019-11-27 13:27
ReporterironiqAssigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
PlatformLinuxOSCentOSOS Version7
Product Version18.2.5 
Fixed in Version 
Summary0001144: Backtrace if trying to login user with pam authentication
DescriptionI tried to configure the PAM authentication for bconsole and bareos-webui, but following the official docs (https://docs.bareos.org/TasksAndConcepts/PAM.html) i get a huge backtrace after entering username and password. I followed the other docs on github (https://github.com/bareos/bareos-contrib/tree/master/misc/bareos_pam_integration) about the pam integration and tried the pamtester command with success. The server is an up2date CentOS 7, the bareos packages are coming from "official" bareos yum repository. The SELinux is set currently to "Enforcing", but also tried with "Permissive" with the same result. Also tried to simplify the PAM config with the official docs version, the result was the same.
Steps To Reproduce1. Configure the director regarding the docs
2. Run: bconsole -c /etc/bareos/bconsole-pam.conf
3. Enter username and password.
Additional Information[root@backup /etc/bareos]# cat /etc/redhat-release
CentOS Linux release 7.7.1908 (Core)
[root@backup /etc/bareos]# yum repolist | grep bareos
bareos_bareos-18.2 bareos:bareos-18.2 (CentOS_7) 45
[root@backup /etc/bareos]# rpm -qa | grep bareos
bareos-filedaemon-18.2.5-144.1.el7.x86_64
bareos-client-18.2.5-144.1.el7.x86_64
bareos-director-18.2.5-144.1.el7.x86_64
bareos-common-18.2.5-144.1.el7.x86_64
bareos-tools-18.2.5-144.1.el7.x86_64
bareos-bconsole-18.2.5-144.1.el7.x86_64
bareos-database-common-18.2.5-144.1.el7.x86_64
bareos-database-tools-18.2.5-144.1.el7.x86_64
bareos-18.2.5-144.1.el7.x86_64
bareos-storage-18.2.5-144.1.el7.x86_64
bareos-database-postgresql-18.2.5-144.1.el7.x86_64
bareos-webui-18.2.5-131.1.el7.noarch
[root@backup /etc/bareos]# cat /etc/pam.d/bareos
auth required pam_env.so
auth sufficient pam_sss.so forward_pass
auth sufficient pam_unix.so try_first_pass
auth required pam_deny.so
[root@backup /etc/bareos]# su - bareos -s /bin/bash
Last login: Tue Nov 26 17:08:42 CET 2019 on pts/0
-bash-4.2$ pamtester bareos foobar authenticate
Password:
pamtester: successfully authenticated
-bash-4.2$ logout
[root@backup /etc/bareos]# cat bconsole-pam.conf
#
# Bareos User Agent (or Console) Configuration File
#

Director {
  Name = bareos-dir
  address = localhost
  Password = "Very Secret Password"
  Description = "Bareos Console credentials for local Director"
}

Console {
  Name = "PamConsole"
  Password = "secret"
}

[root@backup /etc/bareos]# cat bareos-dir.d/console/pam-console.conf
Console {
        Name = "PamConsole"
        Password = "secret"
        UsePamAuthentication = yes
}

[root@backup /etc/bareos]# cat bareos-dir.d/user/foobar.conf
User {
        Name = "foobar"
        Password = ""
        CommandACL = status, .status
    JobACL = *all*
}

[root@backup /etc/bareos]# bconsole -c bconsole-pam.conf
Connecting to Director localhost:9101
 Encryption: PSK-AES256-CBC-SHA
login:foobar
Password: *** Error in `bconsole': double free or corruption (fasttop): 0x0000000001826390 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x81679)[0x7f83fb78c679]
bconsole(_Z22ConsolePamAuthenticateP8_IO_FILEP12BareosSocket+0x9d)[0x40945d]
bconsole(main+0x10c2)[0x405c52]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f83fb72d505]
bconsole[0x4063f8]
======= Memory map: ========
00400000-0040d000 r-xp 00000000 fd:00 188 /usr/sbin/bconsole
0060c000-0060d000 r--p 0000c000 fd:00 188 /usr/sbin/bconsole
0060d000-0060e000 rw-p 0000d000 fd:00 188 /usr/sbin/bconsole
0060e000-0060f000 rw-p 00000000 00:00 0
017e9000-0184c000 rw-p 00000000 00:00 0 [heap]
7f83ec000000-7f83ec021000 rw-p 00000000 00:00 0
7f83ec021000-7f83f0000000 ---p 00000000 00:00 0
7f83f2948000-7f83f2954000 r-xp 00000000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2954000-7f83f2b53000 ---p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b53000-7f83f2b54000 r--p 0000b000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b54000-7f83f2b55000 rw-p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b55000-7f83f2b5b000 rw-p 00000000 00:00 0
7f83f2b5b000-7f83f2b5c000 ---p 00000000 00:00 0
7f83f2b5c000-7f83f335c000 rw-p 00000000 00:00 0
7f83f335c000-7f83f9886000 r--p 00000000 fd:00 8065 /usr/lib/locale/locale-archive
7f83f9886000-7f83f98e6000 r-xp 00000000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f98e6000-7f83f9ae6000 ---p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae6000-7f83f9ae7000 r--p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae7000-7f83f9ae8000 rw-p 00061000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae8000-7f83f9b0c000 r-xp 00000000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9b0c000-7f83f9d0b000 ---p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0b000-7f83f9d0c000 r--p 00023000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0c000-7f83f9d0d000 rw-p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0d000-7f83f9d0f000 rw-p 00000000 00:00 0
7f83f9d0f000-7f83f9d25000 r-xp 00000000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9d25000-7f83f9f24000 ---p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f24000-7f83f9f25000 r--p 00015000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f25000-7f83f9f26000 rw-p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f26000-7f83f9f28000 rw-p 00000000 00:00 0
7f83f9f28000-7f83f9f2b000 r-xp 00000000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83f9f2b000-7f83fa12a000 ---p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12a000-7f83fa12b000 r--p 00002000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12b000-7f83fa12c000 rw-p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12c000-7f83fa13a000 r-xp 00000000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa13a000-7f83fa33a000 ---p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33a000-7f83fa33b000 r--p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33b000-7f83fa33c000 rw-p 0000f000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33c000-7f83fa340000 r-xp 00000000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa340000-7f83fa540000 ---p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa540000-7f83fa541000 r--p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa541000-7f83fa542000 rw-p 00005000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa542000-7f83fa546000 r-xp 00000000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa546000-7f83fa745000 ---p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa745000-7f83fa746000 r--p 00003000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa746000-7f83fa747000 rw-p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa747000-7f83fa778000 r-xp 00000000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa778000-7f83fa977000 ---p 00031000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa977000-7f83fa979000 r--p 00030000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa979000-7f83fa97a000 rw-p 00032000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa97a000-7f83fa97d000 r-xp 00000000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fa97d000-7f83fab7c000 ---p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7c000-7f83fab7d000 r--p 00002000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7d000-7f83fab7e000 rw-p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7e000-7f83fac57000 r-xp 00000000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fac57000-7f83fae56000 ---p 000d9000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae56000-7f83fae64000 r--p 000d8000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae64000-7f83fae67000 rw-p 000e6000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae67000-7f83faeb1000 r-xp 00000000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83faeb1000-7f83fb0b1000 ---p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b1000-7f83fb0b2000 r--p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b2000-7f83fb0b4000 rw-p 0004b000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b4000-7f83fb0b6000 r-xp 00000000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb0b6000-7f83fb2b6000 ---p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b6000-7f83fb2b7000 r--p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b7000-7f83fb2b8000 rw-p 00003000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b8000-7f83fb2d6000 r-xp 00000000 fd:00 11901 /usr/lib64/libaudit.so.1.0.0BAREOS interrupted by signal 6: IOT trap
bconsole, bconsole got signal 6 - IOT trap. Attempting traceback.
exepath=/etc/bareos
Calling: /etc/bareos/btraceback /etc/bareos/bconsole 10627 /tmp
execv: /etc/bareos/btraceback failed: ERR=No such file or directory
[root@backup /etc/bareos]#
TagsNo tags attached.
bareos-master: impact
bareos-master: action
bareos-19.2: impact
bareos-19.2: action
bareos-18.2: impact
bareos-18.2: action
bareos-17.2: impact
bareos-17.2: action
bareos-16.2: impact
bareos-16.2: action
bareos-15.2: impact
bareos-15.2: action
bareos-14.2: impact
bareos-14.2: action
bareos-13.2: impact
bareos-13.2: action
bareos-12.4: impact
bareos-12.4: action

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-11-27 13:27 ironiq New Issue