So, what do we need to add to http://directory.fedora.redhat.com/wiki/Howto:PAM to incorporate this information? Aaron Bliss wrote: >>>Thanks for getting back to me; what should a properly formatted >>>/etc/pam.d/sshd file for rhel4 or rhel3 look like? >>> >>>Aaron >>> >>> >>You might try using authconfig to get a working set of pam files, and then >>tweak from there. On my rhel4 machine, /etc/pam.d/sshd and many other >>services just uses pam_stack to inherit the config from >>/etc/pam.d/system-auth. >> >>/etc/pam.d/sshd: >>auth required pam_stack.so service=system-auth >>auth required pam_nologin.so >>account required pam_stack.so service=system-auth >>password required pam_stack.so service=system-auth >>session required pam_stack.so service=system-auth >>session required pam_loginuid.so >> >>It sould like you have a working /etc/pam.d/login, so use that as a guide >>for editing your system-auth. Also make sure you have "UsePAM yes" in your >>sshd_config. >> >>-- >>John Vestrum >> >>-- >>Fedora-directory-users mailing list >>Fedora-directory-users at redhat.com >>https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> >> >> >I was missing UsePAM yes; all is working now > >-- >Fedora-directory-users mailing list >Fedora-directory-users at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-users > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20051221/fd0eb1b1/attachment.bin