[Bug 2012174] Re: package libpam-modules 1.3.1-5ubuntu4.6 failed to install/upgrade: new libpam-modules:amd64 package pre-installation script subprocess returned error exit status 2

[Steve Langasek]

Thanks, looking at the attached files it's clear what has happened here.
The check in the ubuntu-release-upgrader code does:

        for f in os.listdir('/etc/pam.d'):
            if f in ('common-account', 'common-auth', 'common-password',
                     'common-session', 'common-session-noninteractive'):
                # managed by pam-auth-updates, and any references to
                # pam_tally* will be handled by libpam-modules on upgrade
                # without breaking
                continue
            with open(os.path.join('/etc/pam.d', f)) as f:
                content = f.read()
                if re.search('^[^#]*pam_tally', content, re.MULTILINE):
                    logging.error("pam_tally* in use")
                    # from libpam-modules.templates
[...]

So it specifically ignores references to pam_tally* in
/etc/pam.d/common-* because it's expected these will be managed by the
libpam-modules maintainer scripts.  However, in your case pam_tally2.so
was MANUALLY added to /etc/pam.d/common-account and /etc/pam.d/common-
auth; and this code intended to catch the issue early can't distinguish.

I don't think we're going to risk making the situation worse by trying
to further distinguish between manually and automatically edited
common-* files.  So unfortunately I have to consider this a 'wontfix'.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubuntu-release-upgrader in
Ubuntu.
https://bugs.launchpad.net/bugs/2012174

Title:
  package libpam-modules 1.3.1-5ubuntu4.6 failed to install/upgrade: new
  libpam-modules:amd64 package pre-installation script subprocess
  returned error exit status 2

Status in ubuntu-release-upgrader package in Ubuntu:
  Expired

Bug description:
  Upgrade from Ubuntu 20.04 to 22.4 fails if pam_tally is present in the
  system's PAM config

  I run do-release-upgrade and I got a message upgrade completed with
  errors. I rebooted the server and it is now in an undefined state
  between 20.04 and 22.04. Not all packages have been installed.

  ProblemType: Package
  DistroRelease: Ubuntu 20.04
  Package: libpam-modules 1.3.1-5ubuntu4.6
  ProcVersionSignature: Ubuntu 5.4.0-144.161-generic 5.4.229
  Uname: Linux 5.4.0-144-generic x86_64
  ApportVersion: 2.20.11-0ubuntu27.25
  Architecture: amd64
  CasperMD5CheckResult: pass
  Date: Sun Mar 19 07:20:35 2023
  ErrorMessage: new libpam-modules:amd64 package pre-installation script subprocess returned error exit status 2
  InstallationDate: Installed on 2023-03-19 (0 days ago)
  InstallationMedia: RNP Ubuntu-Server 20.04.1 21.07 "Custom OIEC Secure OS" (20210111)
  Python3Details: /usr/bin/python3.8, Python 3.8.10, python3-minimal, 3.8.2-0ubuntu2
  PythonDetails: N/A
  RelatedPackageVersions:
   dpkg 1.21.1ubuntu2.1
   apt  2.0.9
  SourcePackage: pam
  Title: package libpam-modules 1.3.1-5ubuntu4.6 failed to install/upgrade: new libpam-modules:amd64 package pre-installation script subprocess returned error exit status 2
  UpgradeStatus: Upgraded to focal on 2023-03-19 (0 days ago)
  mtime.conffile..etc.security.limits.conf: 2021-01-09T12:35:56

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/2012174/+subscriptions