查看 more /var/log/secure,发现以下错误:
May 3 23:23:40 gpsdb login: Module is unknown
May 3 23:23:54 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:23:54 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:23:54 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:23:56 gpsdb login: pam_unix(login:session): session opened for user oracle by LOGIN(uid=0)
May 3 23:23:56 gpsdb login: Module is unknown
May 3 23:24:02 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:24:02 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:24:02 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:24:05 gpsdb login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
May 3 23:24:05 gpsdb login: Module is unknown
May 3 23:24:55 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:24:55 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:24:55 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:24:58 gpsdb login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
May 3 23:24:58 gpsdb login: Module is unknown
May 3 23:28:44 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:28:44 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:28:44 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:28:48 gpsdb login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
May 3 23:28:48 gpsdb login: Module is unknown
May 3 23:36:20 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:36:20 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:36:20 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:36:20 gpsdb login: pam_unix(login:auth): bad username [ ]
May 3 23:36:20 gpsdb login: pam_succeed_if(login:auth): error retrieving information about user
May 3 23:36:20 gpsdb login: FAILED LOGIN 1 FROM (null) FOR , User not known to the underlying authentication module
May 3 23:36:20 gpsdb login: pam_unix(login:auth): bad username []
May 3 23:36:20 gpsdb login: pam_succeed_if(login:auth): error retrieving information about user
May 3 23:36:20 gpsdb login: FAILED LOGIN 2 FROM (null) FOR , User not known to the underlying authentication module
May 3 23:36:20 gpsdb login: pam_unix(login:auth): bad username []
May 3 23:36:20 gpsdb login: pam_succeed_if(login:auth): error retrieving information about user
May 3 23:36:20 gpsdb login: FAILED LOGIN 3 FROM (null) FOR , User not known to the underlying authentication module
May 3 23:36:27 gpsdb login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
May 3 23:36:27 gpsdb login: Module is unknown
May 3 23:36:29 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 3 23:36:29 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 3 23:36:29 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 3 23:36:31 gpsdb login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
May 3 23:36:31 gpsdb login: Module is unknown
May 4 00:06:24 gpsdb sshd[6142]: Accepted password for root from 192.168.60.119 port 49242 ssh2
May 4 00:06:24 gpsdb sshd[6142]: pam_unix(sshd:session): session opened for user root by (uid=0)
May 4 00:08:06 gpsdb gdm[6183]: pam_unix(gdm:session): session opened for user root by (uid=0)
May 4 00:09:39 gpsdb userhelper[6449]: pam_timestamp(system-config-network:session): updated timestamp file `/var/run/sudo/root/unk
...skipping 44 lines
May 4 00:41:46 gpsdb login: PAM unable to dlopen(/lib/security/pam_limits.so)
May 4 00:41:46 gpsdb login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
May 4 00:41:46 gpsdb login: PAM adding faulty module: /lib/security/pam_limits.so
May 4 00:41:47 gpsdb login: pam_unix(login:session): session opened for user oracle by LOGIN(uid=0)
May 4 00:41:47 gpsdb login: Module is unknown
May 4 00:42:04 gpsdb gdm[5308]: pam_unix(gdm:session): session opened for user oracle by (uid=0)
May 4 00:42:53 gpsdb userhelper[5541]: pam_timestamp(system-config-display:session): updated timestamp file `/var/run/sudo/oracle/u
nknown:root'
May 4 00:42:53 gpsdb userhelper[5544]: running '/usr/share/system-config-display/system-config-display' with root privileges on beh
alf of 'oracle'
May 4 00:44:19 gpsdb gdm[5308]: pam_unix(gdm:session): session closed for user oracle
May 4 00:44:31 gpsdb gdm[5573]: pam_unix(gdm:session): session opened for user root by (uid=0)
May 4 00:45:42 gpsdb userhelper[5793]: pam_timestamp(system-config-services:session): updated timestamp file `/var/run/sudo/root/un
known'
May 4 00:45:42 gpsdb userhelper[5796]: running '/usr/sbin/system-config-services' with root privileges on behalf of 'root'
May 4 00:46:10 gpsdb gdm[5573]: pam_unix(gdm:session): session closed for user root
May 4 01:00:01 gpsdb su: pam_unix(su-l:session): session opened for user oracle by (uid=0)
May 4 01:05:16 gpsdb sshd[6073]: Accepted password for root from 10.115.7.27 port 49370 ssh2
May 4 01:05:16 gpsdb sshd[6073]: pam_unix(sshd:session): session opened for user root by (uid=0)
根据网上的经验,说是与64位库路径,修改/etc/pam.d/login 中最后一行,
[root@gpsdb ~]# more /etc/pam.d/login
#%PAM-1.0
auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
# pam_selinux.so close should be the first session rule
session required pam_selinux.so close
session include system-auth
session required pam_loginuid.so
session optional pam_console.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session required pam_selinux.so open
session optional pam_keyinit.so force revoke
session required /lib/security/pam_limits.so
修改 /lib/security/pam_limits.so 为 /lib64/security/pam_limits.so即可.
修改后,本地用户即可登陆.
一般情况下 郑老师的这个问题 应该配置操作系统的环境变量的时候 没有正确配置。以前部署RAC的时候,遇到过。
后来在网上仔细看了对应的文档要求。
里面有一条
如果是64bit的操作系统,需要配置 etc/pam.d/login
并且指定64bit的库路径。
即加入:
/lib64/security/pam_limits.so
32位的系统:/lib/security/pam_limits.so
64位的系统:/lib64/security/pam_limits.so 或者根本就不需要指定这个参数。
但是我遇到过部署Oracle的哥们,80%的没有在意这个东西。
欢迎光临 重庆思庄Oracle、Redhat认证学习论坛 (http://bbs.cqsztech.com/) | Powered by Discuz! X3.2 |