Solved PAM broken in jails after update to 14.0-RELEASE

I just upgraded my system from 13.2-RELEASE to 14.0-RELEASE

after updating the ezjail basejail, I can no longer start any services in any jail, since the su command doesn't work due to a broken PAM (apparently?)

the error I get is:

Code:
su: pam_start: System error

I tried moving /etc/pam.d to /etc/pam.d.orig and creating and empy /etc/pam,d but it doesn't seem to work. I verified the pam binaries and it seems they match the base system. Not sure what's happening.

The output from ezjail update was this:

Code:
ezjail-admin update -U -s 13.2-RELEASE
src component not installed, skipped
Looking up update1.FreeBSD.org mirrors... none found.
Fetching metadata signature for 13.2-RELEASE from update1.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 2 metadata patches.. done.
Applying metadata patches... done.
Fetching 2 metadata files... done.
Inspecting system... done.

The following components of FreeBSD seem to be installed:
kernel/generic world/base world/lib32

The following components of FreeBSD do not seem to be installed:
kernel/generic-dbg world/base-dbg world/lib32-dbg

Does this look reasonable (y/n)? y

Fetching metadata signature for 14.0-RELEASE from update1.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 1 metadata patches. done.
Applying metadata patches... done.
Fetching 1 metadata files... done.
Inspecting system... done.
Preparing to download files... done.
The following files will be added as part of updating to
14.0-RELEASE-p4:
/etc/devd/bluetooth.conf
/etc/devd/dhclient.conf
/etc/devd/moused.conf
/etc/devd/power_profile.conf
/etc/devd/syscons.conf
/etc/rc.d/dnctl
/etc/rc.d/ggated
/etc/rc.d/zpoolupgrade
/var/db/etcupdate/current/etc/devd/bluetooth.conf
/var/db/etcupdate/current/etc/devd/dhclient.conf
/var/db/etcupdate/current/etc/devd/moused.conf
/var/db/etcupdate/current/etc/devd/power_profile.conf
/var/db/etcupdate/current/etc/devd/syscons.conf
/var/db/etcupdate/current/etc/rc.d/dnctl
/var/db/etcupdate/current/etc/rc.d/ggated
/var/db/etcupdate/current/etc/rc.d/zpoolupgrade
The following files will be updated as part of updating to
14.0-RELEASE-p4:
/usr/share/man/man3/archive_write_add_filter_zstd.3.gz
/usr/share/man/man3/ibnd_iter_nodes_type.3.gz
/usr/share/zfs/compatibility.d/freebsd-12.3
/usr/share/zfs/compatibility.d/freebsd-12.4
/usr/share/zfs/compatibility.d/ubuntu-22.04
To install the downloaded upgrades, run "/usr/sbin/freebsd-update install".
src component not installed, skipped
Installing updates...install: /tera/jails/basejail//etc/devd/bluetooth.conf: No such file or directory
install: /tera/jails/basejail//etc/devd/dhclient.conf: No such file or directory
install: /tera/jails/basejail//etc/devd/moused.conf: No such file or directory
install: /tera/jails/basejail//etc/devd/power_profile.conf: No such file or directory
install: /tera/jails/basejail//etc/devd/syscons.conf: No such file or directory
install: /tera/jails/basejail//etc/rc.d/dnctl: No such file or directory
install: /tera/jails/basejail//etc/rc.d/ggated: No such file or directory
install: /tera/jails/basejail//etc/rc.d/zpoolupgrade: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/devd/bluetooth.conf: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/devd/dhclient.conf: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/devd/moused.conf: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/devd/power_profile.conf: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/devd/syscons.conf: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/rc.d/dnctl: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/rc.d/ggated: No such file or directory
install: /tera/jails/basejail//var/db/etcupdate/current/etc/rc.d/zpoolupgrade: No such file or directory
Scanning /tera/jails/basejail/usr/share/certs/untrusted for certificates...
Scanning /tera/jails/basejail/usr/share/certs/trusted for certificates...
pwd_mkdb: /tera/jails/basejail/etc/master.passwd: No such file or directory
cap_mkdb: file argument: No such file or directory
 done.
src component not installed, skipped
No updates are available to install.
Run '/usr/sbin/freebsd-update fetch' first.
src component not installed, skipped
Looking up update1.FreeBSD.org mirrors... none found.
Fetching metadata signature for 13.2-RELEASE from update1.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 1 metadata patches. done.
Applying metadata patches... done.
Fetching 1 metadata files... done.
Inspecting system... done.

The following components of FreeBSD seem to be installed:
kernel/generic

The following components of FreeBSD do not seem to be installed:
kernel/generic-dbg world/base world/base-dbg world/lib32 world/lib32-dbg

Does this look reasonable (y/n)? y

Fetching metadata signature for 14.0-RELEASE from update1.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 1 metadata patches. done.
Applying metadata patches... done.
Fetching 1 metadata files... done.
Inspecting system... done.
Preparing to download files... done.
The following files will be added as part of updating to
14.0-RELEASE-p4:
/boot/kernel/acpi_ged.ko
/boot/kernel/atopcase.ko
/boot/kernel/cc_newreno.ko
/boot/kernel/ftgpio.ko
/boot/kernel/geom_union.ko
/boot/kernel/hpt27xx.ko
/boot/kernel/hptmv.ko
/boot/kernel/hptnr.ko
/boot/kernel/hptrr.ko
/boot/kernel/hv_hid.ko
/boot/kernel/if_enic.ko
/boot/kernel/if_gve.ko
/boot/kernel/if_mana.ko
/boot/kernel/if_ovpn.ko
/boot/kernel/iwlwifi-Qu-b0-hr-b0-77.ucode.ko
/boot/kernel/iwlwifi-Qu-b0-jf-b0-77.ucode.ko
/boot/kernel/iwlwifi-Qu-c0-hr-b0-77.ucode.ko
/boot/kernel/iwlwifi-Qu-c0-jf-b0-77.ucode.ko
/boot/kernel/iwlwifi-QuZ-a0-hr-b0-77.ucode.ko
/boot/kernel/iwlwifi-QuZ-a0-jf-b0-77.ucode.ko
/boot/kernel/iwlwifi-cc-a0-77.ucode.ko
/boot/kernel/iwlwifi-so-a0-gf-a0-83.ucode.ko
/boot/kernel/iwlwifi-so-a0-gf4-a0-83.ucode.ko
/boot/kernel/iwlwifi-so-a0-hr-b0-81.ucode.ko
/boot/kernel/iwlwifi-so-a0-jf-b0-77.ucode.ko
/boot/kernel/iwlwifi-ty-a0-gf-a0-83.ucode.ko
/boot/kernel/kinst.ko
/boot/kernel/ktest.ko
/boot/kernel/ktest_example.ko
/boot/kernel/ktest_netlink_message_writer.ko
/boot/kernel/linuxkpi_hdmi.ko
/boot/kernel/mac_ipacl.ko
/boot/kernel/mac_pimd.ko
/boot/kernel/mpi3mr.ko
/boot/kernel/ncthwm.ko
/boot/kernel/nlsysevent.ko
/boot/kernel/p2sb.ko
/boot/kernel/qat_200xx_fw.ko
/boot/kernel/qat_4xxx_fw.ko
/boot/kernel/qat_api.ko
/boot/kernel/qat_c2xxx.ko
/boot/kernel/qat_c3xxx_fw.ko
/boot/kernel/qat_c4xxx_fw.ko
/boot/kernel/qat_c62x_fw.ko
/boot/kernel/qat_common.ko
/boot/kernel/qat_dh895xcc_fw.ko
/boot/kernel/qat_hw.ko
/boot/kernel/tarfs.ko
/boot/kernel/wdatwd.ko
To install the downloaded upgrades, run "/usr/sbin/freebsd-update install".
src component not installed, skipped
Installing updates...mkdir: /tera/jails/newjail//boot: No such file or directory
mtree: /tera/jails/newjail//boot/kernel: No such file or directory
mtree: /tera/jails/newjail//boot/kernel.old: No such file or directory
touch: /tera/jails/newjail//boot/kernel.old/.freebsd-update: No such file or directory
Could not create kernel backup directory
 
I commented out the two following lines in my /etc/pam.d/system:
Code:
# diff system-old-13.2-RELEASE system
8,9c8,9
< auth          sufficient      pam_opie.so             no_warn no_fake_prompts
< auth          requisite       pam_opieaccess.so       no_warn allow_local
---
> #auth         sufficient      pam_opie.so             no_warn no_fake_prompts
> #auth         requisite       pam_opieaccess.so       no_warn allow_local
 
Back
Top