000014112 - PAM Agent 6.0- Cannot restore segment prot after reloc: Permission denied

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000014112
Applies ToPam Agent 6.0
RedHat 5.x
IssueCannot restore segment prot after reloc: Permission denied

PAM agent wont work when using SSHD. The following error is received:

Dec 23 11:20:20 pop sshd[2429]: PAM unable to dlopen(/lib/security/pam_securid.so)

Dec 23 11:20:20 pop sshd[2429]: PAM [error: /lib/security/pam_securid.so: cannot restore segment prot after reloc: Permission denied]

Dec 23 11:20:20 pop sshd[2429]: PAM adding faulty module: /lib/security/pam_securid.so

 

CauseThis is caused by having the SeLinux enabled on the machine the PAM agent is installed on. SeLinux is active in newer Linux distributions and it changes some default system behavior including loading of shared libraries.
Resolution

To Resolve the issue, disable SeLinux. Follow the steps below:

Add the following line: SELINUX=disabled to the file /etc/sysconfig/selinux.

Restart the server.

Legacy Article IDa43893

Attachments

    Outcomes