Comment 4 for bug 1651395

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.openstack.org/413030
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=aae9193675ed214f7a4455708409532ea1665255
Submitter: Jenkins
Branch: master

commit aae9193675ed214f7a4455708409532ea1665255
Author: Vladislav Belogrudov <email address hidden>
Date: Tue Dec 20 13:53:33 2016 +0300

    Containerized sshd does not work with older PAM

    sshd containers don't let logins on some systems with older
    PAM library because /proc/self/loginuid is not always readable
    or writeable. Examples of possible failures on such systems are
    erroneous cold and live migrations.

    This fix does not upgrade PAM but makes pam_loginuid optional
    for nova_ssh and keystone_ssh.

    More information:
      https://github.com/docker/docker/issues/5663
      https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726661
      https://git.fedorahosted.org/cgit/linux-pam.git/tree/modules/pam_loginuid/pam_loginuid.c#n61

    Change-Id: Ic14255b042ceedcff536c062bdcba00502af7a87
    Closes-Bug: #1651395