INTERNAL ONLY: RHEL 6 with SecurID PAM 7.0 agent throws error 'cannot enable executable stack as shared object requires: Permission denied'
Originally Published: 2011-09-27
Article Number
Issue
If you tail /var/log/secure with pam in debug mode, the following errors show up:
Sep 27 15:40:07 fog sshd[14354]: error: PAM: Module is unknown for testuser
Sep 27 15:40:07 fog sshd[14354]: Connection closed by 192.168.131.196
Sep 27 15:59:33 fog sshd[14459]: PAM unable to dlopen(/lib64/security/pam_securid.so): /lib64/security/pam_securid.so: cannot enable executable stack as shared object requires: Permission denied
Sep 27 15:59:33 fog sshd[14459]: PAM adding faulty module: /lib64/security/pam_securid.so
Sep 27 15:59:33 fog sshd[14459]: error: PAM: Module is unknown for testuer from ssh.myhost.com
Sep 27 15:59:33 fog sshd[14459]: Connection closed by 192.168.131.196
Sep 27 16:02:57 fog sshd[14498]: PAM unable to dlopen(/lib64/security/pam_securid.so): /lib64/security/pam_securid.so: cannot enable executable stack as shared object requires: Permission denied
Sep 27 16:02:57 fog sshd[14498]: PAM adding faulty module: /lib64/security/pam_securid.so
Sep 27 16:02:57 fog sshd[14498]: error: PAM: Module is unknown for testuer from ssh.myhost.com
Sep 27 16:02:57 fog sshd[14498]: Connection closed by 192.168.131.196
Cause
Resolution
1. cd /etc/selinux
2. edit config
3. add to the bottom of the file
setenforce 0
4. save the file
Additional information on SELinux is available in the manpage for SELinux
http://linuxcommand.org/man_pages/setenforce8.html
Until such time as the agent is officially qualified on whatever platform displays this error, this can be used as a workaround. There is no official support available for RHEL 6 at the time of this writing. This workaround has been observed as unnecessary on RHEL 4 or RHEL 5.
Related Articles
A user was prompted with a collection when it was not expected. Number of Views Computer Security Products Inc. CSP Authenticator 4.00 - Login Screenshots - RSA Ready Implementation Guide Number of Views How to install and configure the SecurID PAM 8.1.3 agent on Ubuntu 18.04 Number of Views Slow INSERT statement executing from the SoD_Rule_Pkg in RSA Identity Governance & Lifecycle Number of Views Computer Security Products Inc. CSP Authenticator 4.00 - RSA MFA API REST - RSA Ready Implementation Guide Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process RSA Authentication Manager Patch Updates Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide How to Download OTP Token Seed Files from myRSA
Don't see what you're looking for?
