chkusr unable to open file /usr/lib/security/pam_pwquality.so

Document ID : KB000009083
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

Our System Administrator found of lot of errors on all our Linux environments in file /var/log/secure running the System Agent on the Autosys scheduler

chkusr: PAM unable to dlopen(/usr/lib/security/pam_pwquality.so): /usr/lib/security/pam_pwquality.so: cannot open shared object file: No such file or directory

chkusr: PAM adding faulty module: /usr/lib/security/pam_pwquality.so

There is no side affect as all our jobs run fine on the System Agent

Environment:
CA WAAE 11.3.6 SP6 on Linux
Cause:

These errors are due to the way Linux file /etc/pam.d/system-auth-ac is setup:

If the "password" entry is like below, then you need to install the 32bit version of library pam_pwquality.so:

password    requisite     pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=

Resolution:

1) First of all, amend file /etc/yum.conf with "multilib_policy=all "

                On mine: 

                       ./.. 

                      installonly_limit=3 

                      multilib_policy=all 

                      # This is the default, if you make this bigger yum won't see if the metadata 

                      ../.. 

2) above multilib_policy=all option  is going to force yum to install the 32 and 64bit version of any package. 

3) Then install the missing Linux package with: 

         - yum install libpwquality 

 4) This is going to install library /usr/lib/security/pam_pwquality.so 

4) When done, restart the System Agent and repeat the validate step in the WCC configuration tab 

Additional Information:

Some RedHat details HERE