Running su command caused memory fault

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

A memory fault occurs when executing the 'su -' command after user login, if the PAMSC endpoint is running.

xxxxxx:~$ su -
password:
memory fault(coredump)

Core dump file is generated. The 'su -' command runs normally when PAMSC endpoint is stopped.

The following messages are recorded in /var/adm/messages file

Apr 10 10:34:41 ######### svc.startd[14]: [ID 652011 daemon.warning] svc:/security/seosd:default: Method "/lib/svc/method/security-ca_ac stop security" failed with exit status 95.
Apr 10 10:34:42 ######### svc.startd[14]: [ID 748625 daemon.error] security/seosd:default failed fatally: transitioned to maintenance (see 'svcs -xv' for details)

Apr 10 10:34:42 ######### REC-ACTION: Run 'svcs -xv svc:/security/seosd:default' to determine the generic reason why the service failed, the location of any logfiles, and a list of other services impacted. Please refer to the associated reference document at http://support.oracle.com/msg/SMF-8000-YX for the latest service procedures and policies regarding this diagnosis.

Apr 10 10:38:02 ######### svc.startd[14]: [ID 748625 daemon.error] security/seosd:default failed fatally: transitioned to maintenance (see 'svcs -xv' for details)
Apr 10 10:38:02 ######### fmd: [ID 377184 daemon.error] SUNW-MSG-ID: SMF-8000-YX, TYPE: Defect, VER: 1, SEVERITY: Major

Environment

PAMSC Endpoint 14.10.60.129 and 14.10.70.54
SunOS 5.11 11.4.60.151.2 

Resolution

To workaround this problem, set  process_failed_logins token value to 0 in seos.ini file and restart PAMSC Endpoint

; Specifies whether pam_seos calls pam_authenticate to authenticate
; user passwords and process failed logins.
; Set this setting to 0 if you do NOT want pam_authenticate to be called twice.process_failed_logins
; Values: 0 - do not call pam_authenticate from CA Privileged Access Manager Server Control PAM module.
; 1 - Call pam_authenticate from CA Privileged Access Manager Server Control PAM module.
; Default: 1 
process_failed_logins = 0