Re: [Xen-API] Xen API login error

[Stefan Berger <stefanb@xxxxxxxxxx>]

... and indeed, there's at least a problem
in PyPAM. The correct implementation of the failing function in PAMmodule.c
should look like this:

static void PyPAM_dealloc(PyPAMObject *self)
{
    Py_DECREF(self->callback);        <--
added
    Py_DECREF(self->user_data);        <--
added
    free(self->service);
    free(self->user);
    free(self->conv);
    pam_end(self->pamh, PAM_SUCCESS);
    dlclose(self->dlh2);
    dlclose(self->dlh1);
    PyObject_Del(self);     <-- instead of PyMem_DEL,
which will crash xend after a few times.
}

  Stefan

xen-api-bounces@xxxxxxxxxxxxxxxxxxx wrote on 12/14/2007
04:10:42 PM:

> 
> Do you happen to have python PAM installed on your system? I am 
> asking because I installed version 0.5.0 of PyPAM and enabled Xen-
> API authentication by changing xend's config file. Xend crashes when
> I use my username and login as credentials. This is on Fedora Core
7. 
> 
> diff -r 3ee37b6279b7 tools/python/xen/xend/XendAuthSessions.py 
> --- a/tools/python/xen/xend/XendAuthSessions.py      
 Fri Dec 14 
> 10:48:18 2007 +0000 
> +++ b/tools/python/xen/xend/XendAuthSessions.py      
 Fri Dec 14 
> 16:01:55 2007 -0500 
> @@ -83,8 +83,9 @@ class XendAuthSessions: 
>          except NameError: 
>              # if PAM doesn't exist,
let's ignore it 
>              return False 
> -         
> + 
>          pam_auth.start("login")
> +        log.info("A") 
>          pam_auth.set_item(PAM.PAM_USER,
username) 
>   
>          def _pam_conv(auth, query_list,
user_data = None): 
>   
> 
> If I add the line log.info("A") to the above, commands work.
Very 
> strange. I am not sure where the error may be coming from but my 
> suspicion is the PyPAM module. I'd disable authentication in the 
> xend config file and see whether things work better then.   
> 
>    Stefan 
> 
> 
> xen-api-bounces@xxxxxxxxxxxxxxxxxxx wrote on 12/10/2007 06:18:12 AM:
> 
> > Does anybody know why i get this error?
> > What can i do against it?
> > 
> > 
> > [2007-11-30 03:33:00 29410] ERROR (xmlrpclib2:166) Internal error
> > handling session.login_with_password
> > Traceback (most recent call last):
> >   File "usr/lib/python2.4/site-packages/xen/util/xmlrpclib2.py",
line 
> > 131, in _marshaled_dispatch
> >     response = self._dispatch(method, params)
> >   File "/usr/lib/python2.4/SimpleXMLRPCServer.py",
line 406, in _dispatch
> >     return func(*params)
> >   File "usr/lib/python2.4/site-packages/xen/xend/XendAPI.py",
line 744, 
> > in session_login_with_password
> >     session = ((self.auth == AUTH_NONE and
> >   File "usr/lib/python2.4/site-packages/xen/xend/XendAuthSessions.py",
> > line 52, in login_with_password
> >   File "usr/lib/python2.4/site-packages/xen/xend/XendAuthSessions.py",
> > line 87, in is_authorized
> > error: ('Critical error - immediate abort', 26)
> > 
> > 
> > I'm still working on a web based management GUI with the Xen-API
in PHP. 
> > But the problem is that I sometimes get this error and my GUI
can't 
> > connect to the Xen-API correctly anymore. The VM's on the Server
are 
> > still running.
> > 
> > To solve the problem I can shut down all VM's and restart the
xend but 
> > this is bad solution because i can't stop the VM's in production
when I 
> > want. <ende?lp=ende&p=eL4jU.&search=production>
> > 
> > Does anybody has an idea to help me?
> > 
> > Regards
> > André
> > 
> > -- 
> > Oldenburgische Landesbank AG
> > 
> > Vorsitzender des Aufsichtsrates: Dr. Andreas Georgi
> > Vorstand:  Dr. Jörg Bleckmann, Sprecher
> >            Dr. Stefan Friedmann
> >            Dr. Peter Schinzing
> >            Bernd Span
> > Sitz der Gesellschaft: Oldenburg (Oldb)
> > Registergericht: Oldenburg (Oldb)
> > HR-Nummer: HRB 3003
> > 
> > 
> > 
> > _______________________________________________
> > xen-api mailing list
> > xen-api@xxxxxxxxxxxxxxxxxxx
> > http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api
> _______________________________________________
> xen-api mailing list
> xen-api@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api
_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api