在smbd、ssh、cron守护进程开始时有"PAM添加错误模块: pam_winbind.so“、"…pam_kwallet5.so”、"…pam_kwallet.so“--为什么以及如何修复？

Question

我用的是Ubuntu 16.04.5 LTS。我试图读取日志文件中的错误。最令人感兴趣的是：

cat /var/log/auth.log | egrep "unable|faulty"

Nov 25 13:25:13 localhost su[4491]: PAM unable to dlopen(pam_winbind.so): /lib/security/pam_winbind.so: cannot open shared object file: No such file or directory
Nov 25 13:25:13 localhost su[4491]: PAM adding faulty module: pam_winbind.so
Nov 25 13:25:13 localhost systemd: PAM unable to dlopen(pam_winbind.so): /lib/security/pam_winbind.so: cannot open shared object file: No such file or directory
Nov 25 13:25:13 localhost systemd: PAM adding faulty module: pam_winbind.so
Nov 25 13:29:21 localhost smbd: PAM unable to dlopen(pam_winbind.so): /lib/security/pam_winbind.so: cannot open shared object file: No such file or directory
Nov 25 13:29:21 localhost smbd: PAM adding faulty module: pam_winbind.so
Nov 25 13:39:01 localhost CRON[5247]: PAM unable to dlopen(pam_winbind.so): /lib/security/pam_winbind.so: cannot open shared object file: No such file or directory
...
Nov 26 23:53:53 localhost lightdm: PAM adding faulty module: pam_kwallet.so
Nov 26 23:53:53 localhost lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Nov 26 23:53:53 localhost lightdm: PAM adding faulty module: pam_kwallet5.so
Nov 26 23:53:53 localhost lightdm: PAM unable to dlopen(pam_winbind.so): /lib/security/pam_winbind.so: cannot open shared object file: No such file or directory
...

系统完整性是正确的- debsums --config --changed不报告/etc/pam.d目录中的任何更改。

未安装库文件：

$ dpkg -S pam_winbind.so
dpkg-query: no path found matching pattern *pam_winbind.so*

$ dpkg -S pam_kwallet.so
dpkg-query: no path found matching pattern *pam_kwallet.so*

$ dpkg -S pam_kwallet5.so
dpkg-query: no path found matching pattern *pam_kwallet5.so*

为什么/var/log/auth.log中存在这些消息？我该修一下吗？

Answer 1

这些警告可以通过安装相应的软件包来删除：

sudo apt-get install libpam-kwallet4 libpam-kwallet5 libpam-winbind

但是我得到了一个有趣的结果--我的用户只列出了在它的群体中。

通过移除这两个k钱包包，解决了这个问题：

sudo apt-get purge libpam-kwallet4 libpam-kwallet5

上述KWallet问题在LaunchPad上称为bug 1781418。

所以删除这些警告是个坏主意。我肯定也会删除PAM winbind：

sudo apt-get purge libpam-winbind

Answer 2

我只想提一提，我遇到了一个类似的错误，那就是一个不同的包裹淹没了我的日记。

$ journalctl -xe
Hint: You are currently not seeing messages from other users and the system.
      Users in groups 'adm', 'systemd-journal' can see all messages.
      Pass -q to turn off this notice.
Dec 13 21:35:31 uminefi01 sudo[168527]: pam_unix(sudo:session): session closed >
Dec 13 21:35:40 uminefi01 sudo[168564]: PAM unable to dlopen(pam_zfs_key.so): />
Dec 13 21:35:40 uminefi01 sudo[168564]: PAM adding faulty module: pam_zfs_key.so
Dec 13 21:35:40 uminefi01 sudo[168564]:    avery : TTY=pts/0 ; PWD=/home/avery/>
Dec 13 21:35:40 uminefi01 sudo[168564]: pam_unix(sudo:session): session opened >
Dec 13 21:35:40 uminefi01 sudo[168564]: pam_unix(sudo:session): session closed >
Dec 13 21:35:51 uminefi01 sudo[168599]: PAM unable to dlopen(pam_zfs_key.so): />
Dec 13 21:35:51 uminefi01 sudo[168599]: PAM adding faulty module: pam_zfs_key.so

..。等等..。

在apt-file中找到的，很明显它没有安装

$ sudo dpkg -S pam_zfs_key.so
dpkg-query: no path found matching pattern *pam_zfs_key.so*

$ apt-file search pam_zfs_key.so
libpam-zfs: /lib/x86_64-linux-gnu/security/pam_zfs_key.so

$ sudo apt install -y libpam-zfs

现在我可以使用日志再次调试真正的问题了。