jedblack
asked on
solaris 10 tls/ssl ldap auth works, but fails when passwd: compat
Hi All,
I have a solaris 10 client that i'm authenticating against a Oracle(Sun) dsee 6.3 ldap server via TLS/SSL
ldapsearch -Z works fine.
I can login correctly with my ldap user.
However, we use netgroups here and when i enable the following in /etc/nsswitch.conf, ssh logins or su - [ldap user] no longer work....
is nss_ldap (PAM) doing something where its not using the /var/ldap/cert8.db/key8.db
I know the settings are good in all the pam.conf/nsswitch.conf/ because they work just fine on centos 5.5 and opensolaris 06-2009
Any ideas?
I have a solaris 10 client that i'm authenticating against a Oracle(Sun) dsee 6.3 ldap server via TLS/SSL
ldapsearch -Z works fine.
I can login correctly with my ldap user.
However, we use netgroups here and when i enable the following in /etc/nsswitch.conf, ssh logins or su - [ldap user] no longer work....
is nss_ldap (PAM) doing something where its not using the /var/ldap/cert8.db/key8.db
I know the settings are good in all the pam.conf/nsswitch.conf/ because they work just fine on centos 5.5 and opensolaris 06-2009
Any ideas?
bash-3.00# cat /etc/pam.conf
#
#ident "@(#)pam.conf 1.28 04/04/21 SMI"
#
# Copyright 2004 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# PAM configuration
#
# Unless explicitly defined, all services use the modules
# defined in the "other" section.
#
# Modules are defined with relative pathnames, i.e., they are
# relative to /usr/lib/security/$ISA. Absolute path names, as
# present in this file in previous releases are still acceptable.
#
# Authentication management
#
# login service (explicit because of pam_dial_auth)
#
login auth requisite pam_authtok_get.so.1
login auth required pam_dhkeys.so.1
login auth required pam_unix_cred.so.1
login auth sufficient pam_unix_auth.so.1
login auth required pam_dial_auth.so.1
login auth required pam_ldap.so.1
#
# rlogin service (explicit because of pam_rhost_auth)
#
rlogin auth sufficient pam_rhosts_auth.so.1
rlogin auth requisite pam_authtok_get.so.1
rlogin auth required pam_dhkeys.so.1
rlogin auth required pam_unix_cred.so.1
rlogin auth sufficient pam_unix_auth.so.1
rlogin auth required pam_ldap.so.1
#
# Kerberized rlogin service
#
krlogin auth required pam_unix_cred.so.1
krlogin auth binding pam_krb5.so.1
krlogin auth required pam_unix_auth.so.1
#
# rsh service (explicit because of pam_rhost_auth,
# and pam_unix_auth for meaningful pam_setcred)
#
rsh auth sufficient pam_rhosts_auth.so.1
rsh auth required pam_unix_cred.so.1
#
# Kerberized rsh service
#
krsh auth required pam_unix_cred.so.1
krsh auth binding pam_krb5.so.1
krsh auth required pam_unix_auth.so.1
#
# Kerberized telnet service
#
ktelnet auth required pam_unix_cred.so.1
ktelnet auth binding pam_krb5.so.1
ktelnet auth required pam_unix_auth.so.1
#
# PPP service (explicit because of pam_dial_auth)
#
ppp auth requisite pam_authtok_get.so.1
ppp auth required pam_dhkeys.so.1
ppp auth required pam_unix_cred.so.1
ppp auth required pam_unix_auth.so.1
ppp auth sufficient pam_dial_auth.so.1
ppp auth required pam_ldap.so.1
#
# Default definitions for Authentication management
# Used when service name is not explicitly mentioned for authentication
#
other auth requisite pam_authtok_get.so.1
other auth required pam_dhkeys.so.1
other auth required pam_unix_cred.so.1
other auth sufficient pam_unix_auth.so.1
other auth required pam_ldap.so.1
#
# passwd command (explicit because of a different authentication module)
#
passwd auth sufficient pam_passwd_auth.so.1
passwd auth required pam_ldap.so.1
#
# cron service (explicit because of non-usage of pam_roles.so.1)
#
cron account required pam_unix_account.so.1
#
# Default definition for Account management
# Used when service name is not explicitly mentioned for account management
#
other account sufficient pam_ldap.so.1
other account requisite pam_roles.so.1
other account required pam_unix_account.so.1
#
# Default definition for Session management
# Used when service name is not explicitly mentioned for session management
#
other session required pam_unix_session.so.1
#
# Default definition for Password management
# Used when service name is not explicitly mentioned for password management
#
other password required pam_dhkeys.so.1
other password requisite pam_authtok_get.so.1
other password requisite pam_authtok_check.so.1
other password required pam_authtok_store.so.1
#
# Support for Kerberos V5 authentication and example configurations can
# be found in the pam_krb5(5) man page under the "EXAMPLES" section.
#
bash-3.00# cat /etc/nsswitch.conf
passwd: compat
passwd_compat: ldap
shadow: files ldap
group: ldap files
hosts: files dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files ldap
rpc: files
services: files ldap
netgroup: files ldap
publickey: files ldap
automount: files ldap
aliases: files ldap
auth_attr: files ldap
prof_attr: files ldap
project: files ldap
tnrhtp: files ldap
tnrhdb: files ldap
ASKER
Hi larsrohr,
yes, I have +@systems:x::::: in /etc/passwd, and +@systems:::::::: in /etc/shadow
as a test i disabled TLS/SSL - and just using simple bind over port 389.... i can login fine...
but, once i go passwd: compat, passwd_compat: ldap in /etc/nsswitch.conf -- logins no longer work
i ran a truss on "su - tuser2" -- i wondering if its missing some libarary
yes, I have +@systems:x::::: in /etc/passwd, and +@systems:::::::: in /etc/shadow
as a test i disabled TLS/SSL - and just using simple bind over port 389.... i can login fine...
but, once i go passwd: compat, passwd_compat: ldap in /etc/nsswitch.conf -- logins no longer work
i ran a truss on "su - tuser2" -- i wondering if its missing some libarary
bash-3.00# truss su - tuser2
execve("/usr/bin/su", 0x08047EA8, 0x08047EB8) argc = 3
resolvepath("/usr/lib/ld.so.1", "/lib/ld.so.1", 1023) = 12
mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFEFF0000
resolvepath("/usr/bin/su", "/usr/bin/su", 1023) = 11
sysconfig(_CONFIG_PAGESIZE) = 4096
xstat(2, "/usr/bin/su", 0x08047C88) = 0
open("/var/ld/ld.config", O_RDONLY) = 3
fxstat(2, 3, 0x08047BC8) = 0
mmap(0x00000000, 144, PROT_READ, MAP_SHARED, 3, 0) = 0xFEFC0000
close(3) = 0
xstat(2, "/usr/local/lib/libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libcmd.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libcmd.so.1", "/lib/libcmd.so.1", 1023) = 16
open("/usr/lib//libcmd.so.1", O_RDONLY) = 3
mmap(0x00010000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_ALIGN, 3, 0) = 0xFEFB0000
mmap(0x00010000, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEF90000
mmap(0xFEF90000, 8996, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFEF90000
mmap(0xFEFA3000, 505, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 12288) = 0xFEFA3000
munmap(0xFEF93000, 65536) = 0
memcntl(0xFEF90000, 2584, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libbsm.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libbsm.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libbsm.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libbsm.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libbsm.so.1", "/lib/libbsm.so.1", 1023) = 16
open("/usr/lib//libbsm.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 204800, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEF50000
mmap(0xFEF50000, 114766, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFEF50000
mmap(0xFEF7D000, 15962, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 118784) = 0xFEF7D000
mmap(0xFEF81000, 3752, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFEF81000
munmap(0xFEF6D000, 65536) = 0
memcntl(0xFEF50000, 26736, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libpam.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libpam.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libpam.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libpam.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libpam.so.1", "/lib/libpam.so.1", 1023) = 16
open("/usr/lib//libpam.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 94208, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEF30000
mmap(0xFEF30000, 21939, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFEF30000
mmap(0xFEF46000, 3129, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 24576) = 0xFEF46000
munmap(0xFEF36000, 65536) = 0
memcntl(0xFEF30000, 3384, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libc.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libc.so.1", "/lib/libc.so.1", 1023) = 14
open("/usr/lib//libc.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFEFA0000
mmap(0x00010000, 1208320, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEE00000
mmap(0xFEE00000, 1098773, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFEE00000
mmap(0xFEF1D000, 30183, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 1101824) = 0xFEF1D000
mmap(0xFEF25000, 4240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFEF25000
munmap(0xFEF0D000, 65536) = 0
memcntl(0xFEE00000, 123884, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libsocket.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libsocket.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libsocket.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libsocket.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libsocket.so.1", "/lib/libsocket.so.1", 1023) = 19
open("/usr/lib//libsocket.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 114688, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEDE0000
mmap(0xFEDE0000, 43986, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFEDE0000
mmap(0xFEDFB000, 2645, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 45056) = 0xFEDFB000
munmap(0xFEDEB000, 65536) = 0
memcntl(0xFEDE0000, 12080, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libnsl.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libnsl.so.1", "/lib/libnsl.so.1", 1023) = 16
open("/usr/lib//libnsl.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 647168, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFED40000
mmap(0xFED40000, 525537, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFED40000
mmap(0xFEDD1000, 19877, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 528384) = 0xFEDD1000
mmap(0xFEDD6000, 30040, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFEDD6000
munmap(0xFEDC1000, 65536) = 0
memcntl(0xFED40000, 57900, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libmd.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libmd.so.1", "/lib/libmd.so.1", 1023) = 15
open("/usr/lib//libmd.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 126976, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFED20000
mmap(0xFED20000, 56424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFED20000
mmap(0xFED3E000, 552, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 57344) = 0xFED3E000
munmap(0xFED2E000, 65536) = 0
mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFEF70000
memcntl(0xFED20000, 1464, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libsecdb.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libsecdb.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libsecdb.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/lib//libsecdb.so.1", 0x080474B8) = 0
resolvepath("/usr/lib//libsecdb.so.1", "/lib/libsecdb.so.1", 1023) = 18
open("/usr/lib//libsecdb.so.1", O_RDONLY) = 3
mmap(0xFEFB0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFEFB0000
mmap(0x00010000, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFED00000
mmap(0xFED00000, 11898, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFED00000
mmap(0xFED13000, 698, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 12288) = 0xFED13000
munmap(0xFED03000, 65536) = 0
memcntl(0xFED00000, 4128, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libnsl.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libcmd.so.1", 0x080474B8) Err#2 ENOENT
mmap(0x00010000, 24576, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFEF10000
munmap(0xFEFB0000, 32768) = 0
getcontext(0x08047A40)
getrlimit(RLIMIT_STACK, 0x08047A38) = 0
getpid() = 19558 [19557]
lwp_private(0, 1, 0xFEF12A00) = 0x000001C3
setustack(0xFEF12A60)
sigfillset(0xFEF24DD0) = 0
sysi86(SI86FPSTART, 0xFEF25740, 0x0000133F, 0x00001F80) = 0x00000001
brk(0x08066AC0) = 0
brk(0x08068AC0) = 0
open("/etc/default/su", O_RDONLY) = 3
llseek(3, 0, SEEK_CUR) = 0
llseek(3, 0, SEEK_SET) = 0
fstat64(3, 0x08047D50) = 0
brk(0x08068AC0) = 0
brk(0x0806AAC0) = 0
fstat64(3, 0x08047C90) = 0
ioctl(3, TCGETA, 0x08047D24) Err#25 ENOTTY
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
llseek(3, 0xFFFFFFFFFFFFFDD7, SEEK_CUR) = 150
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x08067CEC, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x08067CEC, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x08067CEC, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
sysconfig(_CONFIG_PAGESIZE) = 4096
llseek(3, 0, SEEK_CUR) = 703
close(3) = 0
fstat64(0, 0x08047DA0) = 0
ioctl(0, TCGETA, 0x08047D74) = 0
stat64("/dev/tty", 0x08047CE0) = 0
stat64("/dev/console", 0x08047CE0) = 0
stat64("/dev/conslog", 0x08047CE0) = 0
stat64("/dev/syscon", 0x08047CE0) = 0
stat64("/dev/systty", 0x08047CE0) = 0
stat64("/dev/wscons", 0x08047CE0) Err#2 ENOENT
stat64("/dev/ptmx", 0x08047CE0) = 0
stat64("/dev/ttyp0", 0x08047C20) Err#2 ENOENT
stat64("/dev/ptyp0", 0x08047C20) Err#2 ENOENT
open("/etc/ttysrch", O_RDONLY) = 3
fstat64(3, 0x08047B30) = 0
read(3, " #\n # C o p y r i g h".., 1495) = 1495
close(3) = 0
stat64("/dev/pts/1", 0x08047C20) = 0
fstat64(0, 0x080475C0) = 0
ioctl(0, TCGETA, 0x08047594) = 0
stat64("/dev/wscons", 0x08047500) Err#2 ENOENT
stat64("/dev/ttyp0", 0x08047440) Err#2 ENOENT
stat64("/dev/ptyp0", 0x08047440) Err#2 ENOENT
open("/etc/ttysrch", O_RDONLY) = 3
fstat64(3, 0x08047350) = 0
close(3) = 0
stat64("/dev/pts/1", 0x08047440) = 0
open("/var/adm/utmpx", O_RDONLY) = 3
fstat64(3, 0x08047570) = 0
fstat64(3, 0x080474B0) = 0
ioctl(3, TCGETA, 0x08047544) Err#25 ENOTTY
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0".., 8192) = 2604
llseek(3, 0, SEEK_CUR) = 2604
close(3) = 0
open64("/var/adm/utmpx", O_RDONLY) = 3
llseek(3, 2232, SEEK_SET) = 2232
read(3, " f s e i f t s\0\0\0\0\0".., 372) = 372
close(3) = 0
open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0600) = 3
close(3) = 0
chown("/var/adm/sulog", 0, 0) = 0
open("/etc/pam_debug", O_RDONLY) Err#2 ENOENT
stat64("/etc/pam.conf", 0x08047D50) = 0
open("/etc/pam.conf", O_RDONLY) = 3
mmap(0x00000000, 3563, PROT_READ, MAP_PRIVATE, 3, 0) = 0xFEFB0000
munmap(0xFEFB0000, 3563) = 0
close(3) = 0
auditsys(BSM_AUDITCTL, 0x00000014) Err#22 EINVAL
fxstat(2, -1, 0x08047DB8) Err#9 EBADF
schedctl() = 0xFEFB7000
sigaction(SIGQUIT, 0x08047DA0, 0x08047E20) = 0
sigaction(SIGINT, 0x08047DA0, 0x08047E20) = 0
getuid() = 0 [0]
getpid() = 19558 [19557]
open("/proc/19558/psinfo", O_RDONLY) = 3
read(3, "\0\0\00201\0\0\0 f L\0\0".., 336) = 336
close(3) = 0
mmap(0x00010000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFECE0000
getuid() = 0 [0]
getuid() = 0 [0]
open64("/var/run/name_service_door", O_RDONLY) Err#2 ENOENT
open("/etc/nsswitch.conf", O_RDONLY|O_LARGEFILE) = 3
fcntl(3, F_DUPFD, 0x00000100) Err#22 EINVAL
read(3, " #\n # / e t c / n s s".., 1024) = 823
mmap(0x00010000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFECC0000
read(3, 0xFEF12400, 1024) = 0
close(3) = 0
xstat(2, "/usr/local/lib/nss_compat.so.1", 0x08047538) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//nss_compat.so.1", 0x08047538) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//nss_compat.so.1", 0x08047538) Err#2 ENOENT
xstat(2, "/usr/lib//nss_compat.so.1", 0x08047538) = 0
resolvepath("/usr/lib//nss_compat.so.1", "/lib/nss_compat.so.1", 1023) = 20
open("/usr/lib//nss_compat.so.1", O_RDONLY) = 3
mmap(0x00010000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_ALIGN, 3, 0) = 0xFEDF0000
mmap(0x00010000, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xFECA0000
mmap(0xFECA0000, 12251, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 3, 0) = 0xFECA0000
mmap(0xFECB3000, 754, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 3, 12288) = 0xFECB3000
munmap(0xFECA3000, 65536) = 0
mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFEFB0000
memcntl(0xFECA0000, 2784, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
xstat(2, "/usr/local/lib/libc.so.1", 0x080474D8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libc.so.1", 0x080474D8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libc.so.1", 0x080474D8) Err#2 ENOENT
xstat(2, "/usr/local/lib/libnsl.so.1", 0x080474D8) Err#2 ENOENT
xstat(2, "/usr/local/ssl/lib//libnsl.so.1", 0x080474D8) Err#2 ENOENT
xstat(2, "/usr/sfw/lib//libnsl.so.1", 0x080474D8) Err#2 ENOENT
munmap(0xFEDF0000, 32768) = 0
open("/etc/passwd", O_RDONLY|O_LARGEFILE) = 3
fcntl(3, F_DUPFD, 0x00000100) Err#22 EINVAL
read(3, " r o o t : x : 0 : 0 : S".., 1024) = 909
sysinfo(SI_SRPC_DOMAIN, "", 256) = 1
read(3, 0x08069EB0, 1024) = 0
close(3) = 0
open("/etc/default/login", O_RDONLY) = 3
llseek(3, 0, SEEK_CUR) = 0
llseek(3, 0, SEEK_SET) = 0
fstat64(3, 0x08047D50) = 0
brk(0x0806AAC0) = 0
brk(0x0806CAC0) = 0
fstat64(3, 0x08047C90) = 0
ioctl(3, TCGETA, 0x08047D24) Err#25 ENOTTY
read(3, " # i d e n t\t " @ ( # )".., 8192) = 2258
read(3, 0x08069A9C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 2258
close(3) = 0
fxstat(2, -1, 0x08047DC8) Err#9 EBADF
nanosleep(0x08047E38, 0x08047E40) (sleeping...)
nanosleep(0x08047E38, 0x08047E40) = 0
fstat64(2, 0x08047100) = 0
su: write(2, " s u : ", 4) = 4
Unknown id: tuser2write(2, " U n k n o w n i d : ".., 18) = 18
write(2, "\n", 1) = 1
sigaction(SIGQUIT, 0x08047DA0, 0x08047E20) = 0
sigaction(SIGINT, 0x08047DA0, 0x08047E20) = 0
_exit(1)
bash-3.00#
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That's good news. Glad it worked out.
ASKER
found my own solution by patching.
If not, wouldn't "passwd: files ldap" be sufficient?