I updated today with a few updates from the past several days. Shadow is at 4.15.0. Sometimes, I check the files with pwck to make sure everything is prim & proper. Now I'm getting this:
Code:
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'FAILLOG_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'LASTLOG_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'MAIL_CHECK_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'OBSCURE_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PORTTIME_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'QUOTAS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'MOTD_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ISSUE_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'FTMP_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'NOLOGINS_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENV_TZ' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENV_HZ' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_MIN_LEN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'SU_WHEEL_ONLY' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'CRACKLIB_DICTPATH' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_CHANGE_TRIES' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_ALWAYS_WARN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_MAX_LEN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'CHFN_AUTH' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENVIRON_FILE' in '/etc/login.defs'
I checked
man 5 login.defs and indeed, the options are not there. However, the login.defs from upstream has them. Which is correct? Lastlog is complaining as well:
Code:
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'FAILLOG_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'LASTLOG_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'MAIL_CHECK_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'OBSCURE_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PORTTIME_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'QUOTAS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'MOTD_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ISSUE_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'FTMP_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'NOLOGINS_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENV_TZ' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENV_HZ' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_MIN_LEN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'SU_WHEEL_ONLY' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_CHANGE_TRIES' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_ALWAYS_WARN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_MAX_LEN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'CHFN_AUTH' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENVIRON_FILE' in '/etc/login.defs'
Note
https://github.com/shadow-maint/shadow/issues/967
Evidently, many (but not all) options have been removed from Shadow when PAM is in use. These options are now in PAM. If you get the above errors, track them down in login.defs, remove them, and configure PAM to use them. Note MOTD, although removed from login.defs, is still printed out by login, even though there's a pam_motd.so module, which would give you two MOTDs. It looks like there's an upstream release that might turn off the warnings. Marking this solved.