Troubleshooting
Problem
This technote explains why login fails with "Unable to login: username or password is incorrect", while PAM is activated with Shadow password and MD5 password enabled on Linux when using IBM Rational ClearCase Web (CCWeb), ClearCase Remote Client (CCRC) or MultiSite Web Console (MSWeb).
Symptom
Even though the correct username and password has been entered from the ClearCase portal, login still fails with Unable to login: username or password is incorrect, while PAM is activated with Shadow password and MD5 password enabled on Linux.
If you encounter this issue on with ClearCase 7.1 on Linux, you may also see the errors in the CM Server log similar to these:
[10/13/09 10:48:12:280 CEST] 0000002e CMLogger I com.ibm.rational.stp.server.oncrpc.OncrpcManagedConnectionFactory$BaseServer stop CRVSV0964I ONC RPC server process 'ClearCase - 5.29924' has been stopped.
[10/13/09 10:48:12:281 CEST] 0000002e CMLogger W com.ibm.rational.stp.server.cc.CcProxy doLogin CRVSV0962W ClearCase login failed for user '<username>' on server 'ClearCase - 5.29924'.
Cause
Possible causes for this issue are:
- The correct ClearCase patches may not be applied on the server which support PAM authentication
or
- There is no PAM file configured for ClearCase
or
- If the RWP server is running on Linux, the /usr/lib/libpam.so.0.XX file needs to be linked to /lib/libpam.so.0 as shown in the example below:
$ ls -al libpam*
lrwxrwxrwx 1 root root 14 Jul 23 2006 libpam.so.0 -> libpam.so.0.77
-rwxr-xr-x 1 root root 32024 May 12 2006 libpam.so.0.77
lrwxrwxrwx 1 root root 19 Jul 23 2006 libpam_misc.so.0 -> libpam_misc.so.0.77
-rwxr-xr-x 1 root root 9524 May 12 2006 libpam_misc.so.0.77
lrwxrwxrwx 1 root root 15 Jul 23 2006 libpamc.so.0 -> libpamc.so.0.77
-rwxr-xr-x 1 root root 9108 May 12 2006 libpamc.so.0.77
or
- There is no pam-devel package installed on the RWP server.
Confirm this by running the following command:
$ rpm -q pam-devel
package pam-devel is not installed
Check to see if PAM is installed as well as follows:
$ rpm -q pam
pam-0.75-62
Resolving The Problem
Each of the following solutions corresponds to a cause listed above having the same number.
- Ensure that the correct ClearCase patches are applied for supported use of PAM with ClearCase. See technote 1146281 for more details.
- Verify or create, if needed, a PAM configuration file for ClearCase.
- Login as root
- cd to /etc/pam.d
- Create a ClearCase PAM file by copying the login file in /etc/pam.d and naming the result clearcase. For example, cp login clearcase Otherwise - create a clearcase file with default values as provided by your vendor for the kernel version you have.
Sample login from Red Hat 6.0
#%PAM-1.0
auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
# pam_selinux.so close should be the first session rule
session required pam_selinux.so close
session required pam_loginuid.so
session optional pam_console.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session required pam_selinux.so open
session required pam_namespace.so
session optional pam_keyinit.so force revoke
session include system-auth
-session optional pam_ck_connector.so
- If the /usr/lib/libpam.so.0.XX file is not linked to /lib/libpam.so.0, link them using a standard Linux symbolic link.
If the file is properly linked, you will need to consult your Linux vendor for the newest version of libpam.so as the version in use may be too old to work with the CCWeb components.
The contents of /usr/lib should look similar to this:
/usr/lib% ls -al libpam*
-rw-r--r-- 1 root root 51356 Nov 30 2004 libpam.a
lrwxrwxrwx 1 root root 24 Jun 17 2005 libpam.so -> ../../lib/libpam.so.0.77
-rw-r--r-- 1 root root 8474 Nov 30 2004 libpam_misc.a
lrwxrwxrwx 1 root root 29 Jun 17 2005 libpam_misc.so -> ../../lib/libpam_misc.so.0.77
-rw-r--r-- 1 root root 10382 Nov 30 2004 libpamc.a
lrwxrwxrwx 1 root root 25 Jun 17 2005 libpamc.so -> ../../lib/libpamc.so.0.77
Note the relative pathnames.
Note: The lack of these symbolic links could mean PAM was not installed properly.
- Install the pam-devel package on the RWP server.
Related Information
[{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Web (CCWeb)","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.0;7.1;7.1.1;7.1.2;8.0;8.0.1","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Remote Client","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Web","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Remote Client","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Web Console","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Rational Web Platform (RWP)","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21226161