Error with OpenOTP Plugin for Linux PAM (OpenOTP 1.1)

189 views
Skip to first unread message

Jason Luttgens

unread,
Apr 5, 2013, 8:51:14 PM4/5/13
to rcdevs-t...@googlegroups.com
Hello,

I just compiled the OpenOTP Plugin for Linux PAM (OpenOTP 1.1) integration plugin, however I am seeing this error in my system logs:

Apr  5 20:46:28 mysql sshd[2316]: PAM unable to dlopen(pam_openotp.so): /lib/security/pam_openotp.so: undefined symbol: openotp_terminate
Apr  5 20:46:28 mysql sshd[2316]: PAM adding faulty module: pam_openotp.so

And then authentication fails immediately without contacting the OpenOTP server.

Any ideas?

Thanks,
Jason

Administrators

unread,
Apr 8, 2013, 4:00:54 AM4/8/13
to RCDevs Security Solutions - Technical
Did you compile and install the libopenotp-1.0.7 first?
If you use the pre-compiled version, please try to self-compile...

Jason Luttgens

unread,
Apr 9, 2013, 4:07:48 PM4/9/13
to rcdevs-t...@googlegroups.com
Sure did. Both (libopenotp and pam_openotp) seemed to compile fine and I installed via make, make install.

This is an Ubuntu 12.04.2 LTS 64-bit server running kernel 3.2.0-39-generic.

Kyle Duren

unread,
Oct 23, 2013, 2:01:15 AM10/23/13
to rcdevs-t...@googlegroups.com
Did anyone ever get this figured out? I'm running into the same issue, Ubuntu 12.04, self-compiled libopenotp and pam_openotp.

Thanks!

Administrators

unread,
Oct 24, 2013, 10:09:38 AM10/24/13
to rcdevs-t...@googlegroups.com
Looks like the PAM so module does not manage find the libopenotp.
Did you try to copy the /usr/lib64/libopenotp.so* to /lib64/ hust to check if it's a matter of linker path.

Kyle Duren

unread,
Oct 24, 2013, 5:27:19 PM10/24/13
to rcdevs-t...@googlegroups.com
I copied over the library by hand to correct place and it appears to work, maybe the make install isn't putting it there correctly or something....

Administrators

unread,
Oct 25, 2013, 4:03:40 AM10/25/13
to rcdevs-t...@googlegroups.com
Nice to see that works this way. We will update the module to handle this...

Administrators

unread,
Oct 25, 2013, 4:44:14 AM10/25/13
to rcdevs-t...@googlegroups.com
Can you test this pam module source: http://www.rcdevs.com/downloads/index.php?id=Testing+Versions
First to drop the libopenotp from /lib64/
Recompile this pam module and make install.
It should be able to use the libopenotp from /usr/lib64/

Please tell if that works on your ubuntu.
Reply all
Reply to author
Forward
0 new messages