RE: [Netatalk-devel] [netatalk] Problem with papd authentication (fwd)

[Bjoern F. <li...@fe...>]

> Recently, i had noticed some problem with a Mac printer i have
> configured on a linux redhat 8.0 box. I have installed the
> netatalk-1.5.3.1-4 RPM on it.
> 
> I put mandatory authentication on this printer with these conf lines in
> /etc/atalk/papd.conf
> 
> pr720:\
>           :pr=|/usr/bin/lpr -Ppr720:\
>           :sp:ca:am=uams_clrtxt.so,uams_dhx.so:

You can remove uams_dhx.so, IIRC PSSP does not support DHX.

> 
> I can get printing from a valid Mac user (i.e. an user that can connect
> to an apple volume through appleshare on this server) . I get this error
> lines in /var/log/messages:
> 
> Apr 29 17:46:47 foocomp papd[9188]: child 9194 for "pr720" from 65513.101
> Apr 29 17:46:52 foocomp papd[9194]: PAM unable to
> dlopen(/lib/security/pam_unix.so)
> Apr 29 17:46:52 foocomp papd[9194]: PAM [dlerror:
> /lib/security/pam_unix.so: undefined symbol: pam_get_item]
> Apr 29 17:46:52 foocomp papd[9194]: PAM adding faulty module:
> /lib/security/pam_unix.so
> Apr 29 17:46:52 foocomp papd[9194]: Bad Login ClearTxtUAM: test-user:
> Module is unknown
> Apr 29 17:46:52 foocomp papd[9188]: child 9194 done
> 
> Do you have an idea about the problem and how i can solve it

There was a bug in the papd build process up to netatalk 1.6.2.

It was discussed on netatalk-devel several weeks ago.
http://marc.theaimsgroup.com/?l=netatalk-devel&m=104705727429109&w=2
http://marc.theaimsgroup.com/?l=netatalk-devel&m=104544217710754&w=2

Short story:
Check with "ldd /path/to/papd" if papd is linked against libpam.
If not, you found your problem.

You might consider to upgrade to the current netatalk 1.6.2.

Regards
Bjoern