I'm trying to get OpenSSH to work on my newly installed Solaris 10.
This is my /etc/pam.conf:
#
# Support for OpenSSH (sshd)
#
sshd auth required /usr/lib/security/pam_unix_auth.so.1
sshd account required /usr/lib/security/pam_unix_account.so.1
sshd session required /usr/lib/security/pam_unix_session.so.1
>From what I see, they have separated the pam_unix.so.1 into these.
I get this error (even before supplying password):
sshd[673]: error: PAM: Authentication failed for xxx from x.x.x.x
OpenSSH is configured with UsePAM=yes
I would like to setup max-retries, min length and password history.
These are the modules from solaris 10 lib/security dir:
64@ pam_deny.so@ pam_roles.so@
amd64/ pam_deny.so.1* pam_roles.so.1*
audit_binfile.so@ pam_dhkeys.so@ pam_sample.so@
audit_binfile.so.1* pam_dhkeys.so.1* pam_sample.so.1*
audit_syslog.so@ pam_dial_auth.so@ pam_unix_account.so@
audit_syslog.so.1* pam_dial_auth.so.1* pam_unix_account.so.1*
crypt_bsdbf.so@ pam_krb5.so@ pam_unix_auth.so@
crypt_bsdbf.so.1* pam_krb5.so.1* pam_unix_auth.so.1*
crypt_bsdmd5.so@ pam_krb5_migrate.so@ pam_unix_cred.so@
crypt_bsdmd5.so.1* pam_krb5_migrate.so.1* pam_unix_cred.so.1*
crypt_sunmd5.so@ pam_ldap.so@ pam_unix_session.so@
crypt_sunmd5.so.1* pam_ldap.so.1* pam_unix_session.so.1*
pam_authtok_check.so@ pam_passwd_auth.so@ pkcs11_kernel.so@
pam_authtok_check.so.1* pam_passwd_auth.so.1* pkcs11_kernel.so.1*
pam_authtok_get.so@ pam_projects.so@ pkcs11_softtoken.so@
pam_authtok_get.so.1* pam_projects.so.1* pkcs11_softtoken.so.1*
pam_authtok_store.so@ pam_rhosts_auth.so@
pam_authtok_store.so.1* pam_rhosts_auth.so.1*
If anyone has such configuration, please post it!
Cheers,
Magnus
_______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list