[BlueOnyx:27206] Re: 5211R error GUI login after 2fa

[Taco Scargo]

Hi Janwillem,

pam-1.5.1-19.el9.x86_64 does not contain pam_cracklib.so <http://pam_cracklib.so/>

But the file /etc/pam.d/system-auth-cce references it.

Michael, should this be removed or are we missing pam_cracklib?

By commenting out the line that lists pam_crracklib from the file, I suspect it will be working again.

[root at alma pam.d]# cat /etc/pam.d/system-auth-cce 
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        required      pam_abl.so config=/etc/security/pam_abl.conf
auth        sufficient    pam_unix.so likeauth nullok
auth        required      pam_deny.so

account     required      pam_unix.so

password    required      pam_cracklib.so retry=3
password    sufficient    pam_unix.so nullok use_authtok md5 shadow
password    required      pam_deny.so

session     required      pam_limits.so
session     required      pam_unix.so

> On 22 Aug 2024, at 16:56, JW Ronken via Blueonyx <blueonyx at mail.blueonyx.it> wrote:
> 
> Hi
> One of our 5211R doesn't allow me anymore to login into the GUI as admin.
> After entering the 2FA code I get an "internal server error The server encountered an internal error and was unable to complete your request."
> 
> /var/log/secure shows:
> Aug 22 16:51:48 ds50 cced(smd)[11928]: PAM unable to dlopen(/usr/lib64/security/pam_cracklib.so): /usr/lib64/security/pam_cracklib.so: cannot open shared object file: No such file or directory
> Aug 22 16:51:48 ds50 cced(smd)[11928]: PAM adding faulty module: /usr/lib64/security/pam_cracklib.so
> Aug 22 16:51:48 ds50 ccewrap[11935]: running (/usr/sausalito/sbin/gauth_check.sh)
> 
> already rebooted the server once, server is fully updated as well (I do have SSH access).
> Any idea for a quick fix or how to enable 2fa temporarily from the commandline?
> 
> many thanks
> Janwillem
> 
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20240822/ec58bd1c/attachment-0001.html>