Unable to dlopen pam_lastlog2

Hi fedora community.

When i run dnf upgrade I get the following errors in my logs.

Mär 31 15:44:35 terence (systemd-stdio-bridge)[26220]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26221]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26220]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26221]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26224]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26224]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26223]: PAM unable to dlopen(/usr/lib64/security/pam_lastlog2.so): /usr/lib64/security/pam_lastlog2.so: undefined symbol: pam_syslog
Mär 31 15:44:35 terence (systemd-stdio-bridge)[26223]: PAM adding faulty module: /usr/lib64/security/pam_lastlog2.so

I’ve only found old discussions about the lastlog2 migration, but nothing else.

I didn’t find anything suspicious.

     │ File: /etc/authselect/postlogin
─────┼────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
   1 │ # Generated by authselect
   2 │ # Do not modify this file manually, use authselect instead. Any user changes will be overwritten.
   3 │ # You can stop authselect from managing your configuration by calling 'authselect opt-out'.
   4 │ # See authselect(8) for more details.
   5 │ 
   6 │ 
   7 │ 
   8 │ session     optional                   pam_umask.so silent
   9 │ session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
  10 │ session     [default=1]                pam_lastlog2.so silent
  11 │ session     optional                   pam_lastlog2.so silent
> authselect current
Profile ID: local
Enabled features:
- with-silent-lastlog
- with-fingerprint
- with-mdns4

pls file a bugreport https://bugzilla.redhat.com/

I see the same on my upgraded system. Can’t reproduce in a VM (installed sometime as f44 rawhide ) and a VM upgraded from f42 - f43 -f44.

1 Like

Thanks for confirmation.

Ticket is at 2453457 – Unable to dlopen pam_lastlog2 in case someone wants to follow.

I checked again, those lines are not logged during every dnf session. I suppose that depends on what was installed.