View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0001144bareos-coredirectorpublic2019-11-27 13:272023-10-11 16:24
Reporterironiq Assigned Tobruno-at-bareos  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
PlatformLinuxOSCentOSOS Version7
Product Version18.2.5 
Summary0001144: Backtrace if trying to login user with pam authentication
DescriptionI tried to configure the PAM authentication for bconsole and bareos-webui, but following the official docs (https://docs.bareos.org/TasksAndConcepts/PAM.html) i get a huge backtrace after entering username and password. I followed the other docs on github (https://github.com/bareos/bareos-contrib/tree/master/misc/bareos_pam_integration) about the pam integration and tried the pamtester command with success. The server is an up2date CentOS 7, the bareos packages are coming from "official" bareos yum repository. The SELinux is set currently to "Enforcing", but also tried with "Permissive" with the same result. Also tried to simplify the PAM config with the official docs version, the result was the same.
Steps To Reproduce1. Configure the director regarding the docs
2. Run: bconsole -c /etc/bareos/bconsole-pam.conf
3. Enter username and password.
Additional Information[root@backup /etc/bareos]# cat /etc/redhat-release
CentOS Linux release 7.7.1908 (Core)
[root@backup /etc/bareos]# yum repolist | grep bareos
bareos_bareos-18.2 bareos:bareos-18.2 (CentOS_7) 45
[root@backup /etc/bareos]# rpm -qa | grep bareos
bareos-filedaemon-18.2.5-144.1.el7.x86_64
bareos-client-18.2.5-144.1.el7.x86_64
bareos-director-18.2.5-144.1.el7.x86_64
bareos-common-18.2.5-144.1.el7.x86_64
bareos-tools-18.2.5-144.1.el7.x86_64
bareos-bconsole-18.2.5-144.1.el7.x86_64
bareos-database-common-18.2.5-144.1.el7.x86_64
bareos-database-tools-18.2.5-144.1.el7.x86_64
bareos-18.2.5-144.1.el7.x86_64
bareos-storage-18.2.5-144.1.el7.x86_64
bareos-database-postgresql-18.2.5-144.1.el7.x86_64
bareos-webui-18.2.5-131.1.el7.noarch
[root@backup /etc/bareos]# cat /etc/pam.d/bareos
auth required pam_env.so
auth sufficient pam_sss.so forward_pass
auth sufficient pam_unix.so try_first_pass
auth required pam_deny.so
[root@backup /etc/bareos]# su - bareos -s /bin/bash
Last login: Tue Nov 26 17:08:42 CET 2019 on pts/0
-bash-4.2$ pamtester bareos foobar authenticate
Password:
pamtester: successfully authenticated
-bash-4.2$ logout
[root@backup /etc/bareos]# cat bconsole-pam.conf
#
# Bareos User Agent (or Console) Configuration File
#

Director {
  Name = bareos-dir
  address = localhost
  Password = "Very Secret Password"
  Description = "Bareos Console credentials for local Director"
}

Console {
  Name = "PamConsole"
  Password = "secret"
}

[root@backup /etc/bareos]# cat bareos-dir.d/console/pam-console.conf
Console {
        Name = "PamConsole"
        Password = "secret"
        UsePamAuthentication = yes
}

[root@backup /etc/bareos]# cat bareos-dir.d/user/foobar.conf
User {
        Name = "foobar"
        Password = ""
        CommandACL = status, .status
    JobACL = *all*
}

[root@backup /etc/bareos]# bconsole -c bconsole-pam.conf
Connecting to Director localhost:9101
 Encryption: PSK-AES256-CBC-SHA
login:foobar
Password: *** Error in `bconsole': double free or corruption (fasttop): 0x0000000001826390 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x81679)[0x7f83fb78c679]
bconsole(_Z22ConsolePamAuthenticateP8_IO_FILEP12BareosSocket+0x9d)[0x40945d]
bconsole(main+0x10c2)[0x405c52]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f83fb72d505]
bconsole[0x4063f8]
======= Memory map: ========
00400000-0040d000 r-xp 00000000 fd:00 188 /usr/sbin/bconsole
0060c000-0060d000 r--p 0000c000 fd:00 188 /usr/sbin/bconsole
0060d000-0060e000 rw-p 0000d000 fd:00 188 /usr/sbin/bconsole
0060e000-0060f000 rw-p 00000000 00:00 0
017e9000-0184c000 rw-p 00000000 00:00 0 [heap]
7f83ec000000-7f83ec021000 rw-p 00000000 00:00 0
7f83ec021000-7f83f0000000 ---p 00000000 00:00 0
7f83f2948000-7f83f2954000 r-xp 00000000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2954000-7f83f2b53000 ---p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b53000-7f83f2b54000 r--p 0000b000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b54000-7f83f2b55000 rw-p 0000c000 fd:00 8336 /usr/lib64/libnss_files-2.17.so
7f83f2b55000-7f83f2b5b000 rw-p 00000000 00:00 0
7f83f2b5b000-7f83f2b5c000 ---p 00000000 00:00 0
7f83f2b5c000-7f83f335c000 rw-p 00000000 00:00 0
7f83f335c000-7f83f9886000 r--p 00000000 fd:00 8065 /usr/lib/locale/locale-archive
7f83f9886000-7f83f98e6000 r-xp 00000000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f98e6000-7f83f9ae6000 ---p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae6000-7f83f9ae7000 r--p 00060000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae7000-7f83f9ae8000 rw-p 00061000 fd:00 16996 /usr/lib64/libpcre.so.1.2.0
7f83f9ae8000-7f83f9b0c000 r-xp 00000000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9b0c000-7f83f9d0b000 ---p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0b000-7f83f9d0c000 r--p 00023000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0c000-7f83f9d0d000 rw-p 00024000 fd:00 11896 /usr/lib64/libselinux.so.1
7f83f9d0d000-7f83f9d0f000 rw-p 00000000 00:00 0
7f83f9d0f000-7f83f9d25000 r-xp 00000000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9d25000-7f83f9f24000 ---p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f24000-7f83f9f25000 r--p 00015000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f25000-7f83f9f26000 rw-p 00016000 fd:00 8346 /usr/lib64/libresolv-2.17.so
7f83f9f26000-7f83f9f28000 rw-p 00000000 00:00 0
7f83f9f28000-7f83f9f2b000 r-xp 00000000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83f9f2b000-7f83fa12a000 ---p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12a000-7f83fa12b000 r--p 00002000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12b000-7f83fa12c000 rw-p 00003000 fd:00 17360 /usr/lib64/libkeyutils.so.1.5
7f83fa12c000-7f83fa13a000 r-xp 00000000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa13a000-7f83fa33a000 ---p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33a000-7f83fa33b000 r--p 0000e000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33b000-7f83fa33c000 rw-p 0000f000 fd:00 17861 /usr/lib64/libkrb5support.so.0.1
7f83fa33c000-7f83fa340000 r-xp 00000000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa340000-7f83fa540000 ---p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa540000-7f83fa541000 r--p 00004000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa541000-7f83fa542000 rw-p 00005000 fd:00 17146 /usr/lib64/libcap-ng.so.0.0.0
7f83fa542000-7f83fa546000 r-xp 00000000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa546000-7f83fa745000 ---p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa745000-7f83fa746000 r--p 00003000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa746000-7f83fa747000 rw-p 00004000 fd:00 16978 /usr/lib64/libattr.so.1.1.0
7f83fa747000-7f83fa778000 r-xp 00000000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa778000-7f83fa977000 ---p 00031000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa977000-7f83fa979000 r--p 00030000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa979000-7f83fa97a000 rw-p 00032000 fd:00 17850 /usr/lib64/libk5crypto.so.3.1
7f83fa97a000-7f83fa97d000 r-xp 00000000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fa97d000-7f83fab7c000 ---p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7c000-7f83fab7d000 r--p 00002000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7d000-7f83fab7e000 rw-p 00003000 fd:00 16967 /usr/lib64/libcom_err.so.2.1
7f83fab7e000-7f83fac57000 r-xp 00000000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fac57000-7f83fae56000 ---p 000d9000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae56000-7f83fae64000 r--p 000d8000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae64000-7f83fae67000 rw-p 000e6000 fd:00 17856 /usr/lib64/libkrb5.so.3.3
7f83fae67000-7f83faeb1000 r-xp 00000000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83faeb1000-7f83fb0b1000 ---p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b1000-7f83fb0b2000 r--p 0004a000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b2000-7f83fb0b4000 rw-p 0004b000 fd:00 17727 /usr/lib64/libgssapi_krb5.so.2.2
7f83fb0b4000-7f83fb0b6000 r-xp 00000000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb0b6000-7f83fb2b6000 ---p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b6000-7f83fb2b7000 r--p 00002000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b7000-7f83fb2b8000 rw-p 00003000 fd:00 8083 /usr/lib64/libdl-2.17.so
7f83fb2b8000-7f83fb2d6000 r-xp 00000000 fd:00 11901 /usr/lib64/libaudit.so.1.0.0BAREOS interrupted by signal 6: IOT trap
bconsole, bconsole got signal 6 - IOT trap. Attempting traceback.
exepath=/etc/bareos
Calling: /etc/bareos/btraceback /etc/bareos/bconsole 10627 /tmp
execv: /etc/bareos/btraceback failed: ERR=No such file or directory
[root@backup /etc/bareos]#
TagsNo tags attached.

Activities

bruno-at-bareos

bruno-at-bareos

2023-09-13 18:51

manager   ~0005441

Hello cleaning our bug database entries, I wonder if you can reproduce this with recent code like bareos 22.1.0?
ironiq

ironiq

2023-09-13 18:56

reporter   ~0005442

Several things happened so far, i replaced the director with Ubuntu. I will check tomorrow, but it's possible that this ticket can be closed.
bruno-at-bareos

bruno-at-bareos

2023-10-11 16:24

manager   ~0005466

no feedback, look like no more an issue

Issue History

Date Modified Username Field Change
2019-11-27 13:27 ironiq New Issue
2023-09-13 18:51 bruno-at-bareos Assigned To => bruno-at-bareos
2023-09-13 18:51 bruno-at-bareos Status new => feedback
2023-09-13 18:51 bruno-at-bareos Note Added: 0005441
2023-09-13 18:56 ironiq Note Added: 0005442
2023-09-13 18:56 ironiq Status feedback => assigned
2023-10-11 16:24 bruno-at-bareos Status assigned => closed
2023-10-11 16:24 bruno-at-bareos Resolution open => fixed
2023-10-11 16:24 bruno-at-bareos Note Added: 0005466