Parallels Mobile / Snow Leopard / PAM authentication errors

I found that the Parallels mobile application is having troubles authenticating with my macbook.

I've just upgraded my macbook to Snow Leopard.
I'm running Parallels v 4.0.3844 (May 5 2009) ; configured to allow an iPhone to play with it.
I've got an iTouch running v 3.0 and the Parallels Mobile app from the app store (current as of this week).

Running tcpdump on the network and dtruss on the prl_iphone_proxy process shows that the iTouch is definitely communicating with the macbook.

The /Library/Logs/parallels.log file shows the following errors regarding PAM:

16:17:23.095 F /disp:180:B079D000/ Processing command 'DspCmdUserLogin' 2039
16:17:23.096 F /disp:180:B079D000/ Parallels Dispatcher is( processing logon request from user [kmrabideau],session to restore: = [{b98c8d03-aca2-486a-aebf-97836513f910}]
16:17:23.097 F /CAuth:180:B079D000/ Can't init PAM library: system error
16:17:23.098 F /disp:180:B079D000/ Can't authorize user [kmrabideau].
16:17:23.100 F /iphone:184:B0103000/ SDK API error: 0x80000330

I even went to far as to turn up remote login on the macbook and I can SSH successfully into the macbook from another system. Definitely have the proper username and password.

The Parallels Mobile app on the iTouch just keeps trying to connect and drops back to the screen with the hostname/username/password on it. No errors; no success.

Any ideas on might need to be configured in PAM to allow for successful authentication?

Thanks for any help.

 

Pluggable Authentication Modules (PAM)

- Linux-PAM has been replaced by OpenPAM.
- Modules developers may need to adjust to some API changes. In particular, the misc_conv function has been superseded by openpam_ttyconv(3); and pam_std_option has been superseded by openpam_get_option(3).
- It is recommended that modules be recompiled for Snow Leopard and installed with the file name pam_.so.2.

OpenPAM is currently the default PAM library in *FreeBSD (since 5.0) and *NetBSD (since 3.0), and will be the default PAM library in *Mac OS X starting with version 10.6 (Snow Leopard).

This change has resulted in changes to the way sudo operates also.
By default, sudo will refuse to run if the user must enter a password but it is not possible to disable echo on the terminal. If the visiblepw flag is set, sudo will prompt for a password even when it would be visible on the screen. This makes it possible to run things like "rsh somehost sudo ls" since rsh(1) does not allocate a tty. This flag is off by default now in Snow Leopard probably due to the change to OpenPam. To correct this the following line must be
added to the /private/etc/sudoers configuration file in the Defaults section:
"Defaults visiblepw"

The visiblepw option will allow sudo to work again like it did in 10.5.x.

Unfortunately, I don't know much about OpenPam, but here is a link to the OpenPam website. Maybe
someone over there can assist you if my little fix doesn't apply to your situation.

http://trac.des.no/openpam

 

I tried modifying the sudoers file as suggested.

Unfortunately no joy.

I can ssh or telnet to port 64001 (the port the prl_iphone_proxy process is listening on ) and by trying random commands generate a different error in the log file from the PAM error:

22:23:26.796 F /iphone:190:B0185000/ SSL_accept error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
22:23:26.797 F /iphone:190:B0185000/ Cannot open SSL connection!

So that tells me that the process is listening for connections. But of course it is clueless on how to process the random commands and responds appropriately.

The cert/key files look good. But the PAM files are a maze of twisty files compared to what I manage on other Unix implementations day-to-day...

Usually this kind of error winds up being a misconfigured PAM entry (wrong order for example) or something is invoking an incorrect/missing library. With the upgrade to Snow Leopard, I'm suspecting mismatched.

Thanks for the suggestion, but it didn't work in this case.

 

Iphone mobile app

Karen,
Have you found an answer for Iphone and Snow Leopard, or
has Parallels ignored you?
Georgk

 

Just Upgraded

I upgraded to the intermediate version of PD4 (post 3384 ? but pre PD5) and things worked as advertised.