FS#55514 - [sudo] 1.8.21 won't work with pam.oath

Attached to Project: Arch Linux
Opened by Andri (nobodyiswatching) - Tuesday, 05 September 2017, 10:25 GMT
Last edited by Evangelos Foutras (foutrelis) - Wednesday, 06 September 2017, 00:58 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Evangelos Foutras (foutrelis)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description: sudo stops working with pam.oath after updating to 1.8.21.p1-1. It'll just bypass / not display in CLI pam.oath sequence (but apparently still needs to process pam.auth input, resulting in inability to run as superuser even if the input was correct). su still works properly with pam.oath among many other things, and change only occurs after updating. Sudo works normally after commenting out pam.oath line.


Additional info:
* package version(s): 1.8.21.p1-1
* config and/or log files etc.:

auth required pam_oath.so usersfile=/etc/users.oath digits=6 window=30
auth include system-auth
account include system-auth
session include system-auth


Steps to reproduce:
Use pam.oath to reinforce sudo security.
This task depends upon

Closed by  Evangelos Foutras (foutrelis)
Wednesday, 06 September 2017, 00:58 GMT
Reason for closing:  Fixed
Additional comments about closing:  sudo 1.8.21.p1-2
Comment by Evangelos Foutras (foutrelis) - Tuesday, 05 September 2017, 13:10 GMT
Reported upstream: https://bugzilla.sudo.ws/show_bug.cgi?id=799
Comment by Evangelos Foutras (foutrelis) - Tuesday, 05 September 2017, 20:04 GMT
The upstream fix has been included in sudo 1.8.21.p1-2, currently in [testing].

Loading...