[Bug 1608509] Re: pam_env does not change charset of authentication process

[Steve Langasek]

This is not a bug in pam_env.  Your expectation does not match the
design of pam_env; pam_env never modifies the application's environment,
it only populates the pam-handle-specific "environment" list with a set
of variables that the application can then consume.

You appear to be expecting that you can use pam_env to set an
environment variable that will then be seen by a subsequent module in
the authentication stack, and that's not what it's for.

> auth    required        pam_env.so readenv=1
envfile=/opt/IBM/informix/etc/locale user_readenv=0

> My solution to this issue was a self written PAM-Module

It sounds to me like this is not reusable in the least and what you
actually want is to set the environment of the server process at start-
up time.


** Changed in: pam (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1608509

Title:
  pam_env does not change charset of authentication process

Status in pam package in Ubuntu:
  Invalid

Bug description:
  The module pam_env does not change the character set of authentication
  process.

  The informix database client uses a ISO-8859-1 character set. The
  Ubuntu server is running with de_DE.utf8.

  /etc/pam.d/informix:

  #
  # Then PAM configuration file for the Shadow `informix' service
  #

  # More verbose
  auth    required        pam_warn.so debug

  # Environment
  auth    required        pam_env.so readenv=1 envfile=/opt/IBM/informix/etc/locale user_readenv=0

  # Disallows other than root logins when /etc/nologin exists
  auth    requisite       pam_nologin.so

  # Standard Un*x authentication.
  @include common-auth

  
  /opt/IBM/informix/etc/locale:

  LANG="de_DE.iso88591"

  /var/log/auth.log (with a password containing non 7-bit ascii - e.g.
  german 'Umlaute'):

  Jul 19 15:46:54 myhost oninit: pam_warn(informix:auth): function=[pam_sm_authenticate] service=[informix] terminal=[<unknown>] user=[myuser] ruser=[myuser] rhost=[myclient]
  Jul 19 15:46:54 myhost oninit: [lsass-pam] [module:pam_lsass]pam_sm_authenticate error [login:myuser][error code:40067]

  My solution to this issue was a self written PAM-Module - see
  http://askubuntu.com/questions/800488/how-to-configuring-pam-to-use-
  different-language-locale-settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1608509/+subscriptions