View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0001144 | bareos-core | director | public | 2019-11-27 13:27 | 2023-10-11 16:24 |
Reporter | ironiq | Assigned To | bruno-at-bareos | ||
Priority | normal | Severity | minor | Reproducibility | always |
Status | closed | Resolution | fixed | ||
Platform | Linux | OS | CentOS | OS Version | 7 |
Product Version | 18.2.5 | ||||
Summary | 0001144: Backtrace if trying to login user with pam authentication | ||||
Description | I tried to configure the PAM authentication for bconsole and bareos-webui, but following the official docs (https://docs.bareos.org/TasksAndConcepts/PAM.html) i get a huge backtrace after entering username and password. I followed the other docs on github (https://github.com/bareos/bareos-contrib/tree/master/misc/bareos_pam_integration) about the pam integration and tried the pamtester command with success. The server is an up2date CentOS 7, the bareos packages are coming from "official" bareos yum repository. The SELinux is set currently to "Enforcing", but also tried with "Permissive" with the same result. Also tried to simplify the PAM config with the official docs version, the result was the same. | ||||
Steps To Reproduce | 1. Configure the director regarding the docs 2. Run: bconsole -c /etc/bareos/bconsole-pam.conf 3. Enter username and password. | ||||
Additional Information | [root@backup /etc/bareos]# cat /etc/redhat-release CentOS Linux release 7.7.1908 (Core) [root@backup /etc/bareos]# yum repolist | grep bareos bareos_bareos-18.2 bareos:bareos-18.2 (CentOS_7) 45 [root@backup /etc/bareos]# rpm -qa | grep bareos bareos-filedaemon-18.2.5-144.1.el7.x86_64 bareos-client-18.2.5-144.1.el7.x86_64 bareos-director-18.2.5-144.1.el7.x86_64 bareos-common-18.2.5-144.1.el7.x86_64 bareos-tools-18.2.5-144.1.el7.x86_64 bareos-bconsole-18.2.5-144.1.el7.x86_64 bareos-database-common-18.2.5-144.1.el7.x86_64 bareos-database-tools-18.2.5-144.1.el7.x86_64 bareos-18.2.5-144.1.el7.x86_64 bareos-storage-18.2.5-144.1.el7.x86_64 bareos-database-postgresql-18.2.5-144.1.el7.x86_64 bareos-webui-18.2.5-131.1.el7.noarch [root@backup /etc/bareos]# cat /etc/pam.d/bareos auth required pam_env.so auth sufficient pam_sss.so forward_pass auth sufficient pam_unix.so try_first_pass auth required pam_deny.so [root@backup /etc/bareos]# su - bareos -s /bin/bash Last login: Tue Nov 26 17:08:42 CET 2019 on pts/0 -bash-4.2$ pamtester bareos foobar authenticate Password: pamtester: successfully authenticated -bash-4.2$ logout [root@backup /etc/bareos]# cat bconsole-pam.conf # # Bareos User Agent (or Console) Configuration File # Director { Name = bareos-dir address = localhost Password = "Very Secret Password" Description = "Bareos Console credentials for local Director" } Console { Name = "PamConsole" Password = "secret" } [root@backup /etc/bareos]# cat bareos-dir.d/console/pam-console.conf Console { Name = "PamConsole" Password = "secret" UsePamAuthentication = yes } [root@backup /etc/bareos]# cat bareos-dir.d/user/foobar.conf User { Name = "foobar" Password = "" CommandACL = status, .status JobACL = *all* } [root@backup /etc/bareos]# bconsole -c bconsole-pam.conf Connecting to Director localhost:9101 Encryption: PSK-AES256-CBC-SHA login:foobar Password: *** Error in `bconsole': double free or corruption (fasttop): 0x0000000001826390 *** ======= Backtrace: ========= /lib64/libc.so.6(+0x81679)[0x7f83fb78c679] bconsole(_Z22ConsolePamAuthenticateP8_IO_FILEP12BareosSocket+0x9d)[0x40945d] bconsole(main+0x10c2)[0x405c52] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7f83fb72d505] bconsole[0x4063f8] ======= Memory map: ======== 00400000-0040d000 r-xp 00000000 fd:00 188 /usr/sbin/bconsole 0060c000-0060d000 r--p 0000c000 fd:00 188 /usr/sbin/bconsole 0060d000-0060e000 rw-p 0000d000 fd:00 188 /usr/sbin/bconsole 0060e000-0060f000 rw-p 00000000 00:00 0 017e9000-0184c000 rw-p 00000000 00:00 0 [heap] 7f83ec000000-7f83ec021000 rw-p 00000000 00:00 0 7f83ec021000-7f83f0000000 ---p 00000000 00:00 0 7f83f2948000-7f83f2954000 r-xp 00000000 fd:00 8336 /usr/lib64/libnss_files-2.17.so 7f83f2954000-7f83f2b53000 ---p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so 7f83f2b53000-7f83f2b54000 r--p 0000b000 fd:00 8336 /usr/lib64/libnss_files-2.17.so 7f83f2b54000-7f83f2b55000 rw-p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so 7f83f2b55000-7f83f2b5b000 rw-p 00000000 00:00 0 7f83f2b5b000-7f83f2b5c000 ---p 00000000 00:00 0 7f83f2b5c000-7f83f335c000 rw-p 00000000 00:00 0 7f83f335c000-7f83f9886000 r--p 00000000 fd:00 8065 /usr/lib/locale/locale-archive 7f83f9886000-7f83f98e6000 r-xp 00000000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0 7f83f98e6000-7f83f9ae6000 ---p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0 7f83f9ae6000-7f83f9ae7000 r--p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0 7f83f9ae7000-7f83f9ae8000 rw-p 00061000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0 7f83f9ae8000-7f83f9b0c000 r-xp 00000000 fd:00 11896 /usr/lib64/libselinux.so.1 7f83f9b0c000-7f83f9d0b000 ---p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1 7f83f9d0b000-7f83f9d0c000 r--p 00023000 fd:00 11896 /usr/lib64/libselinux.so.1 7f83f9d0c000-7f83f9d0d000 rw-p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1 7f83f9d0d000-7f83f9d0f000 rw-p 00000000 00:00 0 7f83f9d0f000-7f83f9d25000 r-xp 00000000 fd:00 8346 /usr/lib64/libresolv-2.17.so 7f83f9d25000-7f83f9f24000 ---p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so 7f83f9f24000-7f83f9f25000 r--p 00015000 fd:00 8346 /usr/lib64/libresolv-2.17.so 7f83f9f25000-7f83f9f26000 rw-p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so 7f83f9f26000-7f83f9f28000 rw-p 00000000 00:00 0 7f83f9f28000-7f83f9f2b000 r-xp 00000000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5 7f83f9f2b000-7f83fa12a000 ---p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5 7f83fa12a000-7f83fa12b000 r--p 00002000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5 7f83fa12b000-7f83fa12c000 rw-p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5 7f83fa12c000-7f83fa13a000 r-xp 00000000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1 7f83fa13a000-7f83fa33a000 ---p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1 7f83fa33a000-7f83fa33b000 r--p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1 7f83fa33b000-7f83fa33c000 rw-p 0000f000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1 7f83fa33c000-7f83fa340000 r-xp 00000000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0 7f83fa340000-7f83fa540000 ---p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0 7f83fa540000-7f83fa541000 r--p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0 7f83fa541000-7f83fa542000 rw-p 00005000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0 7f83fa542000-7f83fa546000 r-xp 00000000 fd:00 16978 /usr/lib64/libattr.so.1.1.0 7f83fa546000-7f83fa745000 ---p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0 7f83fa745000-7f83fa746000 r--p 00003000 fd:00 16978 /usr/lib64/libattr.so.1.1.0 7f83fa746000-7f83fa747000 rw-p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0 7f83fa747000-7f83fa778000 r-xp 00000000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1 7f83fa778000-7f83fa977000 ---p 00031000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1 7f83fa977000-7f83fa979000 r--p 00030000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1 7f83fa979000-7f83fa97a000 rw-p 00032000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1 7f83fa97a000-7f83fa97d000 r-xp 00000000 fd:00 16967 /usr/lib64/libcom_err.so.2.1 7f83fa97d000-7f83fab7c000 ---p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1 7f83fab7c000-7f83fab7d000 r--p 00002000 fd:00 16967 /usr/lib64/libcom_err.so.2.1 7f83fab7d000-7f83fab7e000 rw-p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1 7f83fab7e000-7f83fac57000 r-xp 00000000 fd:00 17856 /usr/lib64/libkrb5.so.3.3 7f83fac57000-7f83fae56000 ---p 000d9000 fd:00 17856 /usr/lib64/libkrb5.so.3.3 7f83fae56000-7f83fae64000 r--p 000d8000 fd:00 17856 /usr/lib64/libkrb5.so.3.3 7f83fae64000-7f83fae67000 rw-p 000e6000 fd:00 17856 /usr/lib64/libkrb5.so.3.3 7f83fae67000-7f83faeb1000 r-xp 00000000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2 7f83faeb1000-7f83fb0b1000 ---p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2 7f83fb0b1000-7f83fb0b2000 r--p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2 7f83fb0b2000-7f83fb0b4000 rw-p 0004b000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2 7f83fb0b4000-7f83fb0b6000 r-xp 00000000 fd:00 8083 /usr/lib64/libdl-2.17.so 7f83fb0b6000-7f83fb2b6000 ---p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so 7f83fb2b6000-7f83fb2b7000 r--p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so 7f83fb2b7000-7f83fb2b8000 rw-p 00003000 fd:00 8083 /usr/lib64/libdl-2.17.so 7f83fb2b8000-7f83fb2d6000 r-xp 00000000 fd:00 11901 /usr/lib64/libaudit.so.1.0.0BAREOS interrupted by signal 6: IOT trap bconsole, bconsole got signal 6 - IOT trap. Attempting traceback. exepath=/etc/bareos Calling: /etc/bareos/btraceback /etc/bareos/bconsole 10627 /tmp execv: /etc/bareos/btraceback failed: ERR=No such file or directory [root@backup /etc/bareos]# | ||||
Tags | No tags attached. | ||||
Hello cleaning our bug database entries, I wonder if you can reproduce this with recent code like bareos 22.1.0? | |
Several things happened so far, i replaced the director with Ubuntu. I will check tomorrow, but it's possible that this ticket can be closed. | |
no feedback, look like no more an issue | |
Date Modified | Username | Field | Change |
---|---|---|---|
2019-11-27 13:27 | ironiq | New Issue | |
2023-09-13 18:51 | bruno-at-bareos | Assigned To | => bruno-at-bareos |
2023-09-13 18:51 | bruno-at-bareos | Status | new => feedback |
2023-09-13 18:51 | bruno-at-bareos | Note Added: 0005441 | |
2023-09-13 18:56 | ironiq | Note Added: 0005442 | |
2023-09-13 18:56 | ironiq | Status | feedback => assigned |
2023-10-11 16:24 | bruno-at-bareos | Status | assigned => closed |
2023-10-11 16:24 | bruno-at-bareos | Resolution | open => fixed |
2023-10-11 16:24 | bruno-at-bareos | Note Added: 0005466 |