CentOS 6.5 OpenSSH PAM config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Sorry - without the signing this time.


Hello.

Our products use CentOS 6.5 and we would like to deploy them with custom
openssh RPMs. I have downloaded the sources from
http://athena.caslab.queensu.ca/pub/OpenBSD/OpenSSH/portable and built
the RPMs, but the PAM  configuration file is wrong after installation.

When I install the default openssh-5.3p1 RPMs from the CentOS 6.5
repository, the configuration looks like this:

    # cat /etc/pam.d/sshd

    #%PAM-1.0
    auth       required    pam_sepermit.so
    auth       include      password-auth
    account    required     pam_nologin.so
    account    include      password-auth
    password   include      password-auth
    # pam_selinux.so close should be the first session rule
    session    required     pam_selinux.so close
    session    required     pam_loginuid.so
    # pam_selinux.so open should only be followed by sessions to be executed
    in the
    user context
    session    required     pam_selinux.so open env_params
    session    optional     pam_keyinit.so force revoke
    session    include      password-auth

However, when I rebuild this exact RPM from the source and install it, I
get the following:

    # cat /etc/pam.d/sshd

    #%PAM-1.0
    auth       required     pam_stack.so service=system-auth
    account    required     pam_nologin.so
    account    required     pam_stack.so service=system-auth
    password   required     pam_stack.so service=system-auth
    session    required     pam_stack.so service=system-auth

I was wondering if there are any build logs that would show how the
openssh RPMs were built from the source for CentOS 6.5. Perhaps there is
some type of configuration I am missing that would ensure that I get the
same PAM configuration.

Thanks!
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos




[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux