Page MenuHomeVyOS Platform
Create Task
Maniphest T5110

Show frr op-mode vtysh_pam: Failed in account validation
Closed, ResolvedPublicBUG
Actions

Description

Not sure exactly, but it looks like some kind of bug vtysh_pam: Failed in account validation

vyos@r14:~$ show version frr
vtysh_pam: Failed in account validation: Success(0)FRRouting 8.5 (r14) on Linux(6.1.20-amd64-vyos).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
configured with:
    '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' '--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '-
vyos@r14:~$ show ip route
vtysh_pam: Failed in account validation: Success(0)Codes: K - kernel route, C - connected, S - static, R - RIP,
       O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric,
       > - selected route, * - FIB route, q - queued, r - rejected, b - backup
       t - trapped, o - offload failure

S>* 0.0.0.0/0 [1/0] via 192.168.122.1, eth0, weight 1, 01:30:52
C>* 10.0.0.0/29 is directly connected, wg0, 01:30:54
C>* 192.0.2.5/32 is directly connected, eth1.2020, 01:31:00
C>* 192.0.2.7/32 is directly connected, eth1.2020.555, 01:31:00
C>* 192.168.122.0/24 is directly connected, eth0, 01:31:02
C>* 203.0.113.1/32 is directly connected, dum0, 01:31:03
vyos@r14:~$
vyos@r14:~$ show ip bgp 
vtysh_pam: Failed in account validation: Success(0)No BGP prefixes displayed, 0 exist
vyos@r14:~$

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.4-rolling-202303220317
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedFEATURE REQUESTViacheslavT5100 Update FRR to 8.5
 ResolvedBUGViacheslavT5110 Show frr op-mode vtysh_pam: Failed in account validation

Event Timeline

Viacheslav created this task.Mar 23 2023, 3:45 PM
Viacheslav renamed this task from Show version frr vtysh_pam: Failed in account validation to Show frr op-mode vtysh_pam: Failed in account validation.Mar 23 2023, 6:06 PM
Viacheslav updated the task description. (Show Details)
Viacheslav updated the task description. (Show Details)
Viacheslav added a parent task: T5100: Update FRR to 8.5.Mar 23 2023, 6:08 PM
pasik added a subscriber: pasik.Mar 23 2023, 7:30 PM
stepler added a subscriber: stepler.Mar 28 2023, 5:12 PM

Looks like a PAM configuration issue:

vyos@vyos:~$ cat /etc/pam.d/frr
# Any user may call vtysh but only those belonging to the group frrvty can
# actually connect to the socket and use the program.
auth	sufficient	pam_permit.so
account	sufficient	pam_rootok.so
vyos@vyos:~$ sudo sed -i -re 's/rootok/permit/' /etc/pam.d/frr
vyos@vyos:~$ show version frr
FRRouting 8.5 (vyos) on Linux(6.1.21-amd64-vyos).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
configured with:
    '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' '--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'
Viacheslav added a comment.Mar 29 2023, 8:44 AM

@stepler Thanks
PR https://github.com/vyos/vyos-1x/pull/1918

Viacheslav changed the task status from Open to In progress.Mar 29 2023, 8:44 AM
Viacheslav claimed this task.
Viacheslav changed the task status from In progress to Needs testing.Mar 29 2023, 9:09 AM
Viacheslav closed this task as Resolved.Apr 10 2023, 11:46 AM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.