Configuring PAM for OpenSSH

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I'm trying to get OpenSSH to work on my newly installed Solaris 10.

This is my /etc/pam.conf:

#                                                                        
# Support for OpenSSH (sshd)                                             
#                                                                        
sshd    auth    required        /usr/lib/security/pam_unix_auth.so.1     
sshd    account required        /usr/lib/security/pam_unix_account.so.1  
sshd    session required        /usr/lib/security/pam_unix_session.so.1  

>From what I see, they have separated the pam_unix.so.1 into these.
I get this error (even before supplying password):

sshd[673]: error: PAM: Authentication failed for xxx from x.x.x.x

OpenSSH is configured with UsePAM=yes

I would like to setup max-retries, min length and password history.

These are the modules from solaris 10 lib/security dir:
64@                      pam_deny.so@            pam_roles.so@             
amd64/                   pam_deny.so.1*          pam_roles.so.1*           
audit_binfile.so@        pam_dhkeys.so@          pam_sample.so@            
audit_binfile.so.1*      pam_dhkeys.so.1*        pam_sample.so.1*          
audit_syslog.so@         pam_dial_auth.so@       pam_unix_account.so@      
audit_syslog.so.1*       pam_dial_auth.so.1*     pam_unix_account.so.1*    
crypt_bsdbf.so@          pam_krb5.so@            pam_unix_auth.so@         
crypt_bsdbf.so.1*        pam_krb5.so.1*          pam_unix_auth.so.1*       
crypt_bsdmd5.so@         pam_krb5_migrate.so@    pam_unix_cred.so@         
crypt_bsdmd5.so.1*       pam_krb5_migrate.so.1*  pam_unix_cred.so.1*       
crypt_sunmd5.so@         pam_ldap.so@            pam_unix_session.so@      
crypt_sunmd5.so.1*       pam_ldap.so.1*          pam_unix_session.so.1*    
pam_authtok_check.so@    pam_passwd_auth.so@     pkcs11_kernel.so@         
pam_authtok_check.so.1*  pam_passwd_auth.so.1*   pkcs11_kernel.so.1*       
pam_authtok_get.so@      pam_projects.so@        pkcs11_softtoken.so@      
pam_authtok_get.so.1*    pam_projects.so.1*      pkcs11_softtoken.so.1*    
pam_authtok_store.so@    pam_rhosts_auth.so@                               
pam_authtok_store.so.1*  pam_rhosts_auth.so.1*     

If anyone has such configuration, please post it!

Cheers,
Magnus                        

_______________________________________________

Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list

[Index of Archives]     [Fedora Users]     [Kernel]     [Red Hat Install]     [Linux for the blind]     [Gimp]

  Powered by Linux