sldap segfault on pam_ldap auth

["Janus N." Tøndering <janus@bananus.dk>]

Dear Sirs,

I have wrestled with this problem for quite some days now and I can not
seem to find a way to make it work. I have made a user database in
OpenLDAP (2.1.25) and set up pam_ldap.

The problem is that when I try to authenticate (ssh for instance) the
slapd process crashes.

(gdb) bt
#0  0x40383245 in memmove () from /lib/libc.so.6
#1  0x08098fa7 in lutil_SHA1Transform ()
#2  0x0809a84c in lutil_SHA1Update ()
#3  0x080985ef in lutil_passwd_hash ()
#4  0x080981fa in lutil_passwd ()
#5  0x0807ccf6 in slap_passwd_check ()
#6  0x404f534f in bdb_bind () from /usr/lib/ldap/back_bdb.so
#7  0x0807085d in do_bind ()
#8  0x080575bd in connection_done ()
#9  0x400272c4 in ldap_pvt_thread_pool_destroy () from
/usr/lib/libldap_r.so.2
#10 0x08118eb0 in ?? ()


Thank you for your time.

Regards,
Janus N. Tøndering




System information:

# uname -a
Linux Debian 2.4.25 #1 SMP Fri Feb 20 09:59:55 CET 2004 i686 unknown
(kernel is vanilla from kernel.org)

-----------------------------------------------

# cat /etc/ldap/slapd.conf

# Schema and objectClass definitions
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
                                                                                schemacheck     on
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd.args
loglevel        0
 
# Where the dynamically loaded modules are stored
modulepath      /usr/lib/ldap
moduleload      back_bdb
 
backend         bdb

database        bdb
suffix          "dc=skjoldhoej,dc=dk"
 
directory       "/var/lib/ldap"

index           objectClass eq
lastmod         on
 
rootdn  ###
rootpw  ###
 
access to attribute=userPassword
        by dn="cn=###,dc=skjoldhoej,dc=dk" write
        by anonymous auth
        by self write
        by * none
 
access to dn.base="" by * read
 
access to *
        by dn="cn=###,dc=skjoldhoej,dc=dk" write
        by * read
 

------------------------------------------

# cat /etc/pam.d/ssh
#%PAM-1.0
auth       required     pam_nologin.so
auth       sufficient   pam_ldap.so
auth       required     pam_unix.so
auth       required     pam_env.so # [1]
                                                                                
account    sufficient   pam_ldap.so
account    required     pam_unix.so
                                                                                
session    required     pam_unix.so
session    optional     pam_lastlog.so # [1]
session    optional     pam_motd.so # [1]
session    optional     pam_mail.so standard noenv # [1]
session    required     pam_limits.so
                                                                                
password   sufficient   pam_ldap.so
password   required     pam_unix.so

-- 
Janus N. Tøndering <janus@bananus.dk>
GPG Fingerprint: 4035 778C 4868 25C6 D23E  175A 8593 AEFF 7145 2196