[SOLVED] Shadow spewing errors

jayjwa · 03-14-2024, 08:04 PM

I updated today with a few updates from the past several days. Shadow is at 4.15.0. Sometimes, I check the files with pwck to make sure everything is prim & proper. Now I'm getting this:

Code:

Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'FAILLOG_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'LASTLOG_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'MAIL_CHECK_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'OBSCURE_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PORTTIME_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'QUOTAS_ENAB' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'MOTD_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ISSUE_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'FTMP_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'NOLOGINS_FILE' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENV_TZ' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENV_HZ' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_MIN_LEN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'SU_WHEEL_ONLY' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'CRACKLIB_DICTPATH' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_CHANGE_TRIES' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_ALWAYS_WARN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'PASS_MAX_LEN' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'CHFN_AUTH' in '/etc/login.defs'
Mar 14 13:36:31 atr2 pwck[14386]: shadow: unknown configuration item 'ENVIRON_FILE' in '/etc/login.defs'

I checked man 5 login.defs and indeed, the options are not there. However, the login.defs from upstream has them. Which is correct? Lastlog is complaining as well:

Code:

Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'FAILLOG_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'LASTLOG_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'MAIL_CHECK_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'OBSCURE_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PORTTIME_CHECKS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'QUOTAS_ENAB' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'MOTD_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ISSUE_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'FTMP_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'NOLOGINS_FILE' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENV_TZ' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENV_HZ' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_MIN_LEN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'SU_WHEEL_ONLY' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_CHANGE_TRIES' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_ALWAYS_WARN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'PASS_MAX_LEN' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'CHFN_AUTH' in '/etc/login.defs'
Mar 14 20:52:44 atr2 lastlog: shadow: unknown configuration item 'ENVIRON_FILE' in '/etc/login.defs'

Note https://github.com/shadow-maint/shadow/issues/967

Evidently, many (but not all) options have been removed from Shadow when PAM is in use. These options are now in PAM. If you get the above errors, track them down in login.defs, remove them, and configure PAM to use them. Note MOTD, although removed from login.defs, is still printed out by login, even though there's a pam_motd.so module, which would give you two MOTDs. It looks like there's an upstream release that might turn off the warnings. Marking this solved.

Petri Kaukasoina · 03-15-2024, 01:05 PM

Do you have /etc/login.defs.new ?

jayjwa · 03-15-2024, 05:07 PM

No, that's one I don't allow to overwrite because my login.defs was quite different than the stock one. In any case, I spent a couple hours today learning PAM. I'm sure that knowlege will come in handy again at some point.