compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: cannot open shared object file: No such file or directory

[Karma Dorje]

after resume from suspend/sleep mode i can't login via usb-stick and cannot login via password because my keyboard is unresponsive — not possible to change the input language.
apt-cache policy compiz
compiz:
  Installed: 1:0.9.11+14.04.20140310-0ubuntu1
  Candidate: 1:0.9.11+14.04.20140310-0ubuntu1
  Version table:
 *** 1:0.9.11+14.04.20140310-0ubuntu1 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

apt-cache policy libpam-usb
libpam-usb:
  Installed: 0.5.0-4
  Candidate: 0.5.0-4
  Version table:
 *** 0.5.0-4 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

dpkg --listfiles libpam-usb
/.
/usr
/usr/share
/usr/share/pam-configs
/usr/share/pam-configs/usb
/usr/share/doc
/usr/share/doc/libpam-usb
/usr/share/doc/libpam-usb/README.Debian
/usr/share/doc/libpam-usb/copyright
/usr/share/doc/libpam-usb/NEWS.Debian.gz
/lib
/lib/x86_64-linux-gnu
/lib/x86_64-linux-gnu/security
/lib/x86_64-linux-gnu/security/pam_usb.so
/usr/share/doc/libpam-usb/changelog.Debian.gz

see also https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1309535

[Karma Dorje (taaroa)]

also in /var/log/auth.log i see

Mar 16 14:53:30 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:30 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 14:53:43 taaroa compiz: pam_unix(lightdm:auth): authentication failure; logname= uid=1000 euid=1000 tty= ruser= rhost= user=karma
Mar 16 14:53:45 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 14:53:45 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:45 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 14:53:53 taaroa compiz: pam_unix(lightdm:auth): authentication failure; logname= uid=1000 euid=1000 tty= ruser= rhost= user=karma
Mar 16 14:53:55 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 14:53:55 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 14:53:55 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Mar 16 16:15:09 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Mar 16 16:15:09 taaroa compiz: PAM adding faulty module: pam_usb.so
Mar 16 16:15:09 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"

[Karma Dorje (taaroa)]

after restart lightdm i got successful login via usb-stick

Mar 17 05:38:37 taaroa pam_usb[23531]: pam_usb v0.5.0
Mar 17 05:38:37 taaroa pam_usb[23531]: Authentication request for user "karma" (sudo)
Mar 17 05:38:38 taaroa pam_usb[23531]: Device "KEY" is connected (good).
Mar 17 05:38:38 taaroa pam_usb[23531]: Performing one time pad verification...
Mar 17 05:38:38 taaroa pam_usb[23531]: Regenerating new pads...
Mar 17 05:38:38 taaroa pam_usb[23531]: Access granted.
Mar 17 05:38:38 taaroa sudo: karma : TTY=tty1 ; PWD=/home/karma ; USER=root ; COMMAND=/sbin/restart lightdm
Mar 17 05:38:38 taaroa sudo: pam_unix(sudo:session): session opened for user root by karma(uid=0)
Mar 17 05:38:38 taaroa polkitd(authority=local): Unregistered Authentication Agent for unix-session:c11 (system bus name :1.273, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale ru_RU.UTF-8) (disconnected from bus)
Mar 17 05:38:38 taaroa lightdm[21990]: pam_unix(lightdm:session): session closed for user karma
Mar 17 05:38:39 taaroa systemd-logind[1094]: Removed session c11.
Mar 17 05:38:39 taaroa lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 17 05:38:39 taaroa systemd-logind[1094]: New session c12 of user lightdm.
Mar 17 05:38:39 taaroa systemd-logind[1094]: Linked /tmp/.X11-unix/X0 to /run/user/104/X11-display.
Mar 17 05:38:39 taaroa lightdm: pam_ck_connector(lightdm-greeter:session): nox11 mode, ignoring PAM_TTY :0
Mar 17 05:38:39 taaroa lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"

[Karma Dorje (taaroa)]

added task lightdm, because after exiting sleep/standby/hibernation modes is not possible to change the language, select the session, or select/switch a user.

[Karma Dorje (taaroa)]

after today updates I can finally switch the input languages with a mouse.

[Karma Dorje (taaroa)]

https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1291497

[Andrea Azzarone (azzar1)]

Can you still reproduce the bug with last updates?

[Karma Dorje (taaroa)]

yes, i can. bug is present, my system is up to date.

[Karma Dorje (taaroa)]

Apr 12 05:52:58 taaroa compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Apr 12 05:52:58 taaroa compiz: PAM adding faulty module: pam_usb.so
Apr 12 05:52:58 taaroa compiz: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: невозможно открыть разделяемый объектный файл: Нет такого файла или каталога
Apr 12 05:52:58 taaroa compiz: PAM adding faulty module: pam_kwallet.so
Apr 12 05:52:58 taaroa compiz: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "karma"
Apr 12 05:53:08 taaroa systemd-logind[971]: Operation finished.

[Stephen M. Webb (bregma)]

Since the error is occurring when trying to read a non-Ubuntu-provided library, my guess is that the file /lib/security/pam_usb.so is not installed with the correct privileges. I would suggest either removing your user-built packages and installing the equivalent Ubuntu packages (libpam-usb) or else grant the manuallyy installed library the correct permissions (chmod a+r /lib/security/pam_usb.so).

Please try one of the above and see if that solves the problem.

[Karma Dorje (taaroa)]

Reinstalling did not solve this problem; re-installation has not solved this problem.

$ apt-cache policy libpam-usb
libpam-usb:
  Installed: 0.5.0-4
  Candidate: 0.5.0-4
  Version table:
 *** 0.5.0-4 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

$ chmod a+r /lib/security/pam_usb.so
chmod: cannot access ‘/lib/security/pam_usb.so’: No such file or directory

$ locate pam_usb.so
/lib/x86_64-linux-gnu/security/pam_usb.so

[Andrea Azzarone (azzar1)]

Does it work using gnome-screensaver or other applications/modules using pam?

[Karma Dorje (taaroa)]

#11
This bug affects me when my laptop comes out of standby/sleep mode; everything else works as before. In the output of dmesg I see:

compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: cannot open shared object file: No such file or directory
compiz: PAM adding faulty module: pam_usb.so
compiz: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
compiz: PAM adding faulty module: pam_kwallet.so

[Simon Déziel (sdeziel)]

@taaroa, I reported a bug regarding the missing pam_kwallet.so error: https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1309535

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Eike (e-h-juerrens)]

I am affected, too. Each time I want to log-in again after I locked the screen within unity, I need to select "Switch account". Direct re-log-in is not working. The session is restored successfully, but it's a workaround.

Set-Up:

Ubuntu 14.04.3 LTS
lightdm 1.10.5pam
pamusb-tools 0.5.0-4
pamusb-common 0.5.0-4

Error message in auth.log:
Aug 10 10:33:28 nauru compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: undefined symbol: pam_get_item
Aug 10 10:33:28 nauru compiz: PAM adding faulty module: pam_usb.so
Aug 10 10:33:34 nauru compiz: gkr-pam: unlocked login keyring
Aug 10 10:33:37 nauru compiz: PAM unable to dlopen(pam_usb.so): /lib/security/pam_usb.so: undefined symbol: pam_get_item
Aug 10 10:33:37 nauru compiz: PAM adding faulty module: pam_usb.so
Aug 10 10:33:42 nauru dbus[523]: [system] Rejected send message, 2 matched rules; type="method_return", sender=":1.12" (uid=0 pid=1300 comm="lightdm ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.64" (uid=1000 pid=2863 comm="/usr/lib/x86_64-linux-gnu/indicator-session/indica")

Is there anything else I could provide to help?

[Eike (e-h-juerrens)]

I missed to tell you that I created a symbolic link in /lib:

$ ls -lh /lib | grep security
lrwxrwxrwx 1 root root 30 Aug 10 10:33 security -> /lib/x86_64-linux-gnu/security