#956795 libpam-systemd: fills the logs with messages about pam_systemd.so

Package:
libpam0g
Source:
pam
Description:
Pluggable Authentication Modules library
Submitter:
Francesco Potortì
Date:
2021-12-19 23:21:02 UTC
Severity:
minor
Tags:
#956795#5
Date:
2020-04-15 10:39:47 UTC
From:
To:
I use a testing distribution that I update daily.  On 12 April I started
seeing these message in auth.log:

Apr 15 03:55:01 tucano CRON[3019529]: PAM adding faulty module: pam_systemd.so
Apr 15 03:55:01 tucano CRON[3019530]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:55:01 tucano CRON[3019530]: PAM adding faulty module: pam_systemd.so
Apr 15 03:56:01 tucano CRON[3019721]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:56:01 tucano CRON[3019721]: PAM adding faulty module: pam_systemd.so
Apr 15 03:56:01 tucano CRON[3019722]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:56:01 tucano CRON[3019722]: PAM adding faulty module: pam_systemd.so
Apr 15 03:57:01 tucano CRON[3019911]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:57:01 tucano CRON[3019911]: PAM adding faulty module: pam_systemd.so
Apr 15 03:57:01 tucano CRON[3019910]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:57:01 tucano CRON[3019910]: PAM adding faulty module: pam_systemd.so
Apr 15 03:58:01 tucano CRON[3020088]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:58:01 tucano CRON[3020088]: PAM adding faulty module: pam_systemd.so
Apr 15 03:58:01 tucano CRON[3020089]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Apr 15 03:58:01 tucano CRON[3020089]: PAM adding faulty module: pam_systemd.so
Apr 15 03:59:01 tucano CRON[3020273]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot op

I observe:

$ apt-file find pam_systemd.so
libpam-systemd: /lib/x86_64-linux-gnu/security/pam_systemd.so

$ locate pam_systemd.so
/lib/x86_64-linux-gnu/security/pam_systemd.so

And apparently no problems (I can login via ssh), that's why I marked
the bug as minor.

#956795#10
Date:
2020-04-15 10:55:14 UTC
From:
To:
Am 15.04.20 um 12:39 schrieb Francesco Potortì:

This appears to be a problem in your pam configuration and not
libpam-systemd itself.

Can you attach the output of
grep -R pam_systemd /etc/pam.d
or even better tar /etc/pam.d and attach it archive to the bug report.

#956795#17
Date:
2020-04-15 11:49:53 UTC
From:
To:
Thanks. Here you are:

$ grep -R pam_systemd /etc/pam.d
/etc/pam.d/runuser-l:-session	optional	pam_systemd.so
/etc/pam.d/lightdm-greeter:session   optional pam_systemd.so
/etc/pam.d/systemd-user:session optional pam_systemd.so
/etc/pam.d/common-session:session	optional	pam_systemd.so

#956795#22
Date:
2020-04-15 16:59:03 UTC
From:
To:
Can you also send me the output of
ldd /usr/sbin/cron
and
apt-cache policy libpam0g

#956795#27
Date:
2020-04-15 19:56:58 UTC
From:
To:
$ ldd /usr/sbin/cron
	linux-vdso.so.1 (0x00007ffdbad7f000)
	libpam.so.0 => /lib/x86_64-linux-gnu/libpam.so.0 (0x00007f9c76d08000)
	libselinux.so.1 => /lib/x86_64-linux-gnu/libselinux.so.1 (0x00007f9c76cdd000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f9c76b1a000)
	libaudit.so.1 => /lib/x86_64-linux-gnu/libaudit.so.1 (0x00007f9c76aef000)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f9c76aea000)
	libpcre2-8.so.0 => /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0 (0x00007f9c76a5a000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f9c76d5f000)
	libcap-ng.so.0 => /lib/x86_64-linux-gnu/libcap-ng.so.0 (0x00007f9c76a50000)
	libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f9c76a2f000)

$ apt-cache policy libpam0g
libpam0g:
  Installed: 1.3.1-5
  Candidate: 1.3.1-5
  Version table:
 *** 1.3.1-5 990
        990 http://ftp.it.debian.org/debian testing/main amd64 Packages
        101 http://ftp.it.debian.org/debian unstable/main amd64 Packages
        100 /var/lib/dpkg/status

#956795#32
Date:
2020-04-15 20:18:19 UTC
From:
To:
Am 15.04.20 um 12:39 schrieb Francesco Potortì:

I'm reassigning this to libpam0g.

It should load the module from the multi-arch path. I'm not sure why it
tries to load it from /lib/security.
This doesn't look like a libpam-systemd error to me, as the error
happens even before the module is loaded.

#956795#41
Date:
2020-04-15 22:07:13 UTC
From:
To:
Am 15.04.20 um 12:39 schrieb Francesco Potortì:

I wonder if this is an architecture mismatch somewhere.

Which packages are i386 on your amd64 system?
dpkg --get-selections | grep i386

#956795#46
Date:
2020-04-15 22:08:44 UTC
From:
To:
$ dpkg --get-selections | grep i386
beignet-opencl-icd:i386				deinstall
freeglut3:i386					deinstall
gcc-10-base:i386				install
gcc-9-base:i386					install
liba52-0.7.4:i386				deinstall
libacl1:i386					install
libasn1-8-heimdal:i386				deinstall
libatk-adaptor:i386				deinstall
libattr1:i386					install
libavc1394-0:i386				deinstall
libblkid1:i386					install
libbsd0:i386					install
libc6:i386					install
libc6-i386					install
libcanberra-gtk3-0:i386				deinstall
libcloog-ppl1:i386				deinstall
libcrypt1:i386					install
libdc1394-22:i386				deinstall
libdca0:i386					deinstall
libdconf1:i386					deinstall
libdvdnav4:i386					deinstall
libdvdread4:i386				deinstall
libesd0:i386					deinstall
libfaac0:i386					deinstall
libfaad2:i386					deinstall
libffi6:i386					install
libffi7:i386					install
libfftw3-single3:i386				deinstall
libgcc-s1:i386					install
libglib2.0-0:i386				install
libglu1-mesa:i386				deinstall
libgmp10:i386					install
libgnutls30:i386				install
libgssapi3-heimdal:i386				deinstall
libgtk-3-0:i386					deinstall
libhcrypto4-heimdal:i386			deinstall
libheimbase1-heimdal:i386			deinstall
libheimntlm0-heimdal:i386			deinstall
libhogweed5:i386				install
libhx509-5-heimdal:i386				deinstall
libidn2-0:i386					install
libiec61883-0:i386				deinstall
libjpeg62-turbo:i386				install
libkrb5-26-heimdal:i386				deinstall
libldb1:i386					deinstall
liblqr-1-0:i386					deinstall
liblzma5:i386					install
libmad0:i386					deinstall
libmodplug1:i386				deinstall
libmount1:i386					install
libmp3lame0:i386				install
libmpcdec6:i386					deinstall
libnettle7:i386					install
libnss3:i386					deinstall
libp11-kit0:i386				install
libpam0g:i386					deinstall
libpcre2-8-0:i386				install
libpcre3:i386					install
libpython2.7-minimal:i386			deinstall
libroken18-heimdal:i386				deinstall
librtmp1:i386					install
libsane:i386					deinstall
libsdl1.2debian:i386				deinstall
libseccomp2:i386				deinstall
libselinux1:i386				install
libsensors4:i386				deinstall
libtasn1-6:i386					install
libtbb2:i386					deinstall
libtinfo5:i386					install
libtwolame0:i386				deinstall
libunistring2:i386				install
libuuid1:i386					install
libvdpau-va-gl1:i386				deinstall
libvo-amrwbenc0:i386				install
libwbclient0:i386				deinstall
libwind0-heimdal:i386				deinstall
libx11-6:i386					install
libxau6:i386					install
libxcb1:i386					install
libxdmcp6:i386					install
libxext6:i386					install
libxi6:i386					install
libxkbfile1:i386				deinstall
libxrender1:i386				install
libxtst6:i386					install
linux-libc-dev:i386				install
xaw3dg:i386					deinstall
xv:i386						install
zlib1g:i386					install

#956795#51
Date:
2020-04-15 22:11:06 UTC
From:
To:
Am 16.04.20 um 00:07 schrieb Michael Biebl:
systemctl stop cron
strace -f /usr/sbin/cron -f | grep pam

#956795#56
Date:
2020-04-15 23:09:09 UTC
From:
To:
# systemctl stop cron
# strace -f /usr/sbin/cron -f 2>&1 | grep pam > /tmp/log


===File /tmp/log============================================
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC) = 9
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3405964] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3405964] stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY) = 8
[pid 3405964] read(8, "#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY) = 7
[pid 3405964] read(7, "#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3405964] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3405964] stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3405964] read(8, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3405964] read(8, "#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] stat("/etc/pam.d",  <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3405964] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3405964] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3405963] read(8, "#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] stat("/etc/pam.d",  <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3405963] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3405964] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3405963] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY) = 7
[pid 3405971] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3405971] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3405971] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3405971] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3405971] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3405971] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3405980] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3405980] <... read resumed>"3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3405980] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3405980] <... read resumed>"3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3405980] <... read resumed>"3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3405980] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC) = 9
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406159] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406159] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 8
[pid 3406159] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406157] stat("/etc/pam.d",  <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] stat("/etc/pam.d",  <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406159] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406157] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406158] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406171] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406171] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406171] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406171] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406171] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406171] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406173] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406173] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406173] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406173] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406173] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406173] <... read resumed>"3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406344] stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY) = 8
[pid 3406344] read(8, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406344] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406344] read(7, "#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406344] read(8, "#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406344] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406344] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406344] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406344] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406344] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] stat("/etc/pam.d",  <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406343] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406344] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406343] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406347] <... read resumed>"11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406347] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406347] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406347] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406347] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406347] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406356] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406356] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406356] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406356] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406356] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406356] <... read resumed>"3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406537] stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] read(8, "#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406537] read(8, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406537] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 8
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406537] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406537] stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406537] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406537] read(8, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406537] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406537] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406537] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 1480
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_gnome_keyring.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 9
[pid 3406536] stat("/etc/pam.d",  <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/pam.d/common-session", O_RDONLY <unfinished ...>
[pid 3406536] <... read resumed>"#\n# /etc/pam.d/common-session - "..., 4096) = 1189
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_systemd.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406537] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406536] openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY <unfinished ...>
[pid 3406540] <... read resumed>"11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406540] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406540] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406540] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406540] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406540] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406549] read(3, "11575 ((sd-pam)) S 11574 11574 1"..., 1024) = 177
[pid 3406549] read(3, "3071912 (spamd) S 1 3071912 3071"..., 1024) = 203
[pid 3406549] read(3, "3071920 (spamd child) S 3071912 "..., 1024) = 208
[pid 3406549] read(3, "3071921 (spamd child) S 3071912 "..., 1024) = 201
[pid 3406549] read(3, "3071922 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406549] read(3, "3301144 (spamd child) S 3071912 "..., 1024) = 197
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY) = 7
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/cron", O_RDONLY <unfinished ...>
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_cap.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-session-noninteractive", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/common-session-no"..., 4096) = 1154
[pid 3406728] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/other - specify t"..., 4096) = 520
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-auth", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1249
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-account", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406729] <... read resumed>"#\n# /etc/pam.d/common-account - "..., 4096) = 1208
[pid 3406728] stat("/etc/pam.d",  <unfinished ...>
[pid 3406729] stat("/etc/pam.d",  <unfinished ...>
[pid 3406728] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406729] openat(AT_FDCWD, "/etc/pam.d/common-password", O_RDONLY <unfinished ...>
[pid 3406728] <... read resumed>"#\n# /etc/pam.d/common-password -"..., 4096) = 148============================================================

#956795#61
Date:
2021-12-19 23:09:16 UTC
From:
To:
It had stopped (don't know why).  Since yesterday, after a big update, I
have got these on auth.log every minute:

Dec 18 17:03:01 tucano CRON[3228265]: PAM unable to dlopen(pam_systemd.so): /lib/security/pam_systemd.so: cannot open shared object file: No such file or directory
Dec 18 17:03:01 tucano CRON[3228265]: PAM adding faulty module: pam_systemd.so