compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: cannot open shared object file: No such file or directory

Bug #1293058 reported by Karma Dorje
40
This bug affects 8 people
Affects Status Importance Assigned to Milestone
Unity
Invalid
Undecided
Unassigned
libpam-usb (Ubuntu)
Confirmed
Undecided
Unassigned
lightdm (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

after resume from suspend/sleep mode i can't login via usb-stick and cannot login via password because my keyboard is unresponsive — not possible to change the input language.
apt-cache policy compiz
compiz:
  Installed: 1:0.9.11+14.04.20140310-0ubuntu1
  Candidate: 1:0.9.11+14.04.20140310-0ubuntu1
  Version table:
 *** 1:0.9.11+14.04.20140310-0ubuntu1 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

apt-cache policy libpam-usb
libpam-usb:
  Installed: 0.5.0-4
  Candidate: 0.5.0-4
  Version table:
 *** 0.5.0-4 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

dpkg --listfiles libpam-usb
/.
/usr
/usr/share
/usr/share/pam-configs
/usr/share/pam-configs/usb
/usr/share/doc
/usr/share/doc/libpam-usb
/usr/share/doc/libpam-usb/README.Debian
/usr/share/doc/libpam-usb/copyright
/usr/share/doc/libpam-usb/NEWS.Debian.gz
/lib
/lib/x86_64-linux-gnu
/lib/x86_64-linux-gnu/security
/lib/x86_64-linux-gnu/security/pam_usb.so
/usr/share/doc/libpam-usb/changelog.Debian.gz

see also https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1309535

Revision history for this message
Karma Dorje (taaroa) wrote :

also in /var/log/auth.log i see

Mar 16 14:53:30 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:30 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 14:53:43 taaroa compiz: pam_unix(lightdm:auth): authentication failure; logname= uid=1000 euid=1000 tty= ruser= rhost= user=karma
Mar 16 14:53:45 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 14:53:45 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:45 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 14:53:53 taaroa compiz: pam_unix(lightdm:auth): authentication failure; logname= uid=1000 euid=1000 tty= ruser= rhost= user=karma
Mar 16 14:53:55 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 14:53:55 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:55 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 16:15:09 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 16:15:09 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 16:15:09 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"

Karma Dorje (taaroa)
description: updated
Karma Dorje (taaroa)
tags: added: amd64 trusty
tags: added: running-unity
Revision history for this message
Karma Dorje (taaroa) wrote :

after restart lightdm i got successful login via usb-stick

Mar 17 05:38:37 taaroa pam_usb[23531]: pam_usb v0.5.0
Mar 17 05:38:37 taaroa pam_usb[23531]: Authentication request for user "karma" (sudo)
Mar 17 05:38:38 taaroa pam_usb[23531]: Device "KEY" is connected (good).
Mar 17 05:38:38 taaroa pam_usb[23531]: Performing one time pad verification...
Mar 17 05:38:38 taaroa pam_usb[23531]: Regenerating new pads...
Mar 17 05:38:38 taaroa pam_usb[23531]: Access granted.
Mar 17 05:38:38 taaroa sudo: karma : TTY=tty1 ; PWD=/home/karma ; USER=root ; COMMAND=/sbin/restart lightdm
Mar 17 05:38:38 taaroa sudo: pam_unix(sudo:session): session opened for user root by karma(uid=0)
Mar 17 05:38:38 taaroa polkitd(authority=local): Unregistered Authentication Agent for unix-session:c11 (system bus name :1.273, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale ru_RU.UTF-8) (disconnected from bus)
Mar 17 05:38:38 taaroa lightdm[21990]: pam_unix(lightdm:session): session closed for user karma
Mar 17 05:38:39 taaroa systemd-logind[1094]: Removed session c11.
Mar 17 05:38:39 taaroa lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 17 05:38:39 taaroa systemd-logind[1094]: New session c12 of user lightdm.
Mar 17 05:38:39 taaroa systemd-logind[1094]: Linked /tmp/.X11-unix/X0 to /run/user/104/X11-display.
Mar 17 05:38:39 taaroa lightdm: pam_ck_connector(lightdm-greeter:session): nox11 mode, ignoring PAM_TTY :0
Mar 17 05:38:39 taaroa lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"

Revision history for this message
Karma Dorje (taaroa) wrote :

added task lightdm, because after exiting sleep/standby/hibernation modes is not possible to change the language, select the session, or select/switch a user.

affects: compiz → unity
tags: added: lockscreen
Revision history for this message
Karma Dorje (taaroa) wrote :

after today updates I can finally switch the input languages with a mouse.

Revision history for this message
Karma Dorje (taaroa) wrote :
Revision history for this message
Andrea Azzarone (azzar1) wrote :

Can you still reproduce the bug with last updates?

Changed in unity:
status: New → Incomplete
Changed in lightdm (Ubuntu):
status: New → Incomplete
Revision history for this message
Karma Dorje (taaroa) wrote :

yes, i can. bug is present, my system is up to date.

Revision history for this message
Karma Dorje (taaroa) wrote :

Apr 12 05:52:58 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Apr 12 05:52:58 taaroa compiz: PAM adding faulty module: pam_usb.so
Apr 12 05:52:58 taaroa compiz: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Apr 12 05:52:58 taaroa compiz: PAM adding faulty module: pam_kwallet.so
Apr 12 05:52:58 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Apr 12 05:53:08 taaroa systemd-logind[971]: Operation finished.

Karma Dorje (taaroa)
Changed in unity:
status: Incomplete → New
Changed in lightdm (Ubuntu):
status: Incomplete → New
Revision history for this message
Stephen M. Webb (bregma) wrote :

Since the error is occurring when trying to read a non-Ubuntu-provided library, my guess is that the file /lib/security/pam_usb.so is not installed with the correct privileges. I would suggest either removing your user-built packages and installing the equivalent Ubuntu packages (libpam-usb) or else grant the manuallyy installed library the correct permissions (chmod a+r /lib/security/pam_usb.so).

Please try one of the above and see if that solves the problem.

Changed in unity:
status: New → Incomplete
Revision history for this message
Karma Dorje (taaroa) wrote :

Reinstalling did not solve this problem; re-installation has not solved this problem.

$ apt-cache policy libpam-usb
libpam-usb:
  Installed: 0.5.0-4
  Candidate: 0.5.0-4
  Version table:
 *** 0.5.0-4 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

$ chmod a+r /lib/security/pam_usb.so
chmod: cannot access ‘/lib/security/pam_usb.so’: No such file or directory

$ locate pam_usb.so
/lib/x86_64-linux-gnu/security/pam_usb.so

Revision history for this message
Andrea Azzarone (azzar1) wrote :

Does it work using gnome-screensaver or other applications/modules using pam?

Revision history for this message
Karma Dorje (taaroa) wrote :

#11
This bug affects me when my laptop comes out of standby/sleep mode; everything else works as before. In the output of dmesg I see:

compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: cannot open shared object file: No such file or directory
compiz: PAM adding faulty module: pam_usb.so
compiz: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
compiz: PAM adding faulty module: pam_kwallet.so

Revision history for this message
Simon Déziel (sdeziel) wrote :

@taaroa, I reported a bug regarding the missing pam_kwallet.so error: https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1309535

Karma Dorje (taaroa)
Changed in unity:
status: Incomplete → Invalid
Changed in lightdm (Ubuntu):
status: New → Confirmed
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in libpam-usb (Ubuntu):
status: New → Confirmed
Louis Bouchard (louis)
affects: unity → firstlogin
affects: firstlogin → unity
Revision history for this message
Eike (e-h-juerrens) wrote :

I am affected, too. Each time I want to log-in again after I locked the screen within unity, I need to select "Switch account". Direct re-log-in is not working. The session is restored successfully, but it's a workaround.

Set-Up:

Ubuntu 14.04.3 LTS
lightdm 1.10.5pam
pamusb-tools 0.5.0-4
pamusb-common 0.5.0-4

Error message in auth.log:
Aug 10 10:33:28 nauru compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: undefined symbol: pam_get_item
Aug 10 10:33:28 nauru compiz: PAM adding faulty module: pam_usb.so
Aug 10 10:33:34 nauru compiz: gkr-pam: unlocked login keyring
Aug 10 10:33:37 nauru compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: undefined symbol: pam_get_item
Aug 10 10:33:37 nauru compiz: PAM adding faulty module: pam_usb.so
Aug 10 10:33:42 nauru dbus[523]: [system] Rejected send message, 2 matched rules; type="method_return", sender=":1.12" (uid=0 pid=1300 comm="lightdm ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.64" (uid=1000 pid=2863 comm="/usr/lib/x86_64-linux-gnu/indicator-session/indica")

Is there anything else I could provide to help?

Revision history for this message
Eike (e-h-juerrens) wrote :

I missed to tell you that I created a symbolic link in /lib:

$ ls -lh /lib | grep security
lrwxrwxrwx 1 root root 30 Aug 10 10:33 security -> /lib/x86_64-linux-gnu/security

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.