topic Re: su error in Operating System - HP-UX

su error

Robert Smol — Wed, 01 Feb 2006 04:56:48 GMT

Hi, I am having problem with su - to another user.

root@czhs0681# su - ehealth
/usr/lib/dld.sl: Unresolved symbol: initialize_error_table_r (code) from /usr/local/lib/libkrb5.sl
Abort(coredump)

Can anybody help me to get over this? We do not use Kerberos at all. I remeber installing some KRB depot for CIFS server. I've attached core file.

Re: su error

Steven E. Protter — Wed, 01 Feb 2006 04:58:38 GMT

Shalom Robert,

Recommend running strings on the core file.

Also:

See that the pam configuration is not trying to block su to this user.

I'd also like to know that the PATH and SHLIB_PATH variables are normal on this machine.

SEP

Re: su error

Muthukumar_5 — Wed, 01 Feb 2006 05:02:22 GMT

what is there in pam.conf for su configuration? May be it is getting problem with kerberose configured su login. Check out.

--
Muthu

Re: su error

Robert Smol — Wed, 01 Feb 2006 05:07:12 GMT

thanks, for quick reply, here is /etc/pam.conf
root@czhs0681# cat /etc/pam.conf
#
# PAM configuration
#
# Authentication management
#
login auth required /usr/lib/security/libpam_unix.1
su auth required /usr/lib/security/libpam_unix.1
dtlogin auth required /usr/lib/security/libpam_unix.1
dtaction auth required /usr/lib/security/libpam_unix.1
ftp auth required /usr/lib/security/libpam_unix.1
OTHER auth required /usr/lib/security/libpam_unix.1
#
# Account management
#
login account required /usr/lib/security/libpam_unix.1
su account required /usr/lib/security/libpam_unix.1
dtlogin account required /usr/lib/security/libpam_unix.1
dtaction account required /usr/lib/security/libpam_unix.1
ftp account required /usr/lib/security/libpam_unix.1
#
OTHER account required /usr/lib/security/libpam_unix.1
#
# Session management
#
login session required /usr/lib/security/libpam_unix.1
dtlogin session required /usr/lib/security/libpam_unix.1
dtaction session required /usr/lib/security/libpam_unix.1
OTHER session required /usr/lib/security/libpam_unix.1
#
# Password management
#
login password required /usr/lib/security/libpam_unix.1
passwd password required /usr/lib/security/libpam_unix.1
dtlogin password required /usr/lib/security/libpam_unix.1
dtaction password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1

strings on core file do show something like

/sbin/sh
(/etc/krb5.conf
9open /etc/krb5.conf: No such file or directory
!initialize_error_table_r
(code)
from
!/usr/local/lib/libkrb5.sl
]8Hw
OGpw
@(#)$Id: afssys.c,v 1.73 2005/06/02 07:25:58 lha Exp $
/etc/name_to_sysnum
2AFS_SYSCALL
/proc/fs/openafs/afs_ioctl

root@czhs0681# echo $PATH
/usr/sbin:/opt/gm/bin:/usr/local/pa20_32/bin/:/usr/local/bin:/usr/bin:/usr/ccs/bin:/usr/contrib/bin:/opt/hpnpl//bin:/opt/hparray/bin:/opt/nettladm/bin:/opt/upgrade/bin:/opt/fcms/bin:/opt/pd/bin:/opt/resmon/bin:/usr/bin/X11:/usr/contrib/bin/X11:/usr/sbin/diag/contrib:/opt/graphics/common/bin:/opt/mx/bin:/opt/wbem/bin:/opt/wbem/sbin:/opt/perf/bin:/opt/ignite/bin:/opt/OV/bin/OpC:/opt/OV/bin:/opt/perl/bin:/usr/local/mysql/bin:/opt/sec_mgmt/spc/bin:/opt/ssh/bin:/opt/openv/netbackup/bin:/usr/local/bin:/opt/VRTS/bin:/sbin:/usr/symmapps/vcm:/opt/sudo/sbin:/usr/local/bin:/etc/vx/bin:/opt/VRTS/bin:/opt/Navisphere/bin:/usr/local/sbin
root@czhs0681# echo $SHLIB_PATH
:/usr/lib:/usr/lib/X11R5:/opt/Navisphere/lib

I would like to see where libkrb5 gets involved.

Re: su error

Robert Smol — Wed, 01 Feb 2006 05:09:30 GMT

Ha, when I invoke su -K (no kerberos) it works! can I disable it by default?

Re: su error

Arunvijai_4 — Wed, 01 Feb 2006 05:10:42 GMT

Hello,

Kerberos 5 library should be from /usr/lib/libkrb5.sl or /usr/lib/pa20_64/libkrb5.sl. It shouldn't be from /usr/local/lib/libkrb5.sl.

Export SHLIB_PATH=/usr/lib:$SHLIB_PATH

-Arun

Re: su error

Robert Smol — Wed, 01 Feb 2006 06:12:27 GMT

problem SOLVED. Guys it was newbie problem. I have su installed in /usr/local (not sure where from) and PATH was set to /usr/local/bin.

root@czhs0681# ldd /usr/local/bin/su
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/lib/libdld.2 => /usr/lib/libdld.2
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/local/lib/libdb.sl => /usr/local/lib/libdb.sl
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/local/lib/libroken.sl => /usr/local/lib/libroken.sl
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/local/lib/libdb.sl => /usr/local/lib/libdb.sl
/usr/local/lib/libcom_err.sl => /usr/local/lib/libcom_err.sl
/usr/local/lib/libasn1.sl => /usr/local/lib/libasn1.sl
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/local/lib/libcom_err.sl => /usr/local/lib/libcom_err.sl
/usr/local/lib/libdes.sl => /usr/local/lib/libdes.sl
/usr/lib/libc.2 => /usr/lib/libc.2
/usr/local/lib/libkrb5.sl => /usr/local/lib/libkrb5.sl

so here comes the libkrb. Once I used HP su at /usr/bin, problem disappeared.

Thanks for support.

Re: su error

Robert Smol — Wed, 01 Feb 2006 06:13:09 GMT

indicated in previous message