PAM and /etc/pam.conf

PAM and /etc/pam.conf

Post by qc.. » Wed, 19 Apr 2000 04:00:00



The big question is How can I setup PAM to log telnet/SSH connections?
I have done the following
/etc/pam.conf
..
telnet session required /usr/lib/security/pam_unix.so.1
..
/etc/syslog.conf
..
auth.* /var/log/pamlog
..

restart syslogd by kill -HUP (syslogd process)
 After some failed telnet logings /var/log/pamlog didn't show up. I
tried touch pamlog and restart the syslogd, but pamlog stayed at 0 byte.

I have noticed
login   auth  required  /usr/lib/security/$ISA/pam_unix.so.1
What is this $ISA? Do i need it?

Thanks for the help.

 
 
 

PAM and /etc/pam.conf

Post by John Cecer » Sun, 30 Apr 2000 04:00:00


The $ISA will be set to sparcv9 if you're booted in 64 bit mode, and set
to nothing if you're booted in 32 bit mode. It sounds like you're booted
in 64 bit mode and trying to use the 32 bit module. Put the $ISA in your
line too:

telnet session required /usr/lib/security/$ISA/pam_unix.so.1

so that you use the 64 bit module in /usr/lib/security/sparcv9 rather
than the 32 bit module (which won't work running a 64 bit OS) in
/usr/lib/security.

John


> The big question is How can I setup PAM to log telnet/SSH connections?
> I have done the following
> /etc/pam.conf
> ..
> telnet session required /usr/lib/security/pam_unix.so.1
> ..
> /etc/syslog.conf
> ..
> auth.* /var/log/pamlog
> ..

> restart syslogd by kill -HUP (syslogd process)
>  After some failed telnet logings /var/log/pamlog didn't show up. I
> tried touch pamlog and restart the syslogd, but pamlog stayed at 0 byte.

> I have noticed
> login   auth  required  /usr/lib/security/$ISA/pam_unix.so.1
> What is this $ISA? Do i need it?

> Thanks for the help.

--
John Cecere

To reply, remove the _NOSPAM_ from my email address.

"Those who desire to give up Freedom in order to gain Security, will not
have,
                         nor do they deserve, either one." -- Thomas
Jefferson

 
 
 

1. PAM (/etc/pam.conf).....Is It Needed?

I do not have much experience with PAM, but in conversations with
others relating to our Solaris servers (versions 2.6 thru 9), I'm under
the impression that we are not using it.

In a recent audit of some of our files, we were cited with having some
servers "less secure" than others simply by virtue of the entries
within /etc/pam.conf.  They do seem to differ, especially when
comparing the 2.6 servers with more current versions (7 thru 9).

My questions become: "IF we are not using PAM, I would presume that we
do not have a need to access the /etc/pam.conf file.  That being said,
do we even need it (i.e. can it be removed without serious
ramifications)?  How would one go about determining IF it is "actually"
being used?

Thanks.

2. XFree86

3. PAM/RedHat: pop3 /etc/pam.d config

4. Using Crossover

5. ftp chroot jail dir & pam 1.0 /etc/pam.d/ftp file

6. Video flickering with Mandrake 6.0

7. redhat 6.1, PAM, and having to alter /etc/pam.d/kppp

8. help!&about eth

9. in.ftpd: open_pam_conf: stat(/etc/pam.conf) failed

10. 2.6 /etc/pam.conf question

11. Any doc on /etc/pam.conf and /lib/security/* anywhere????

12. then it must be pam (not in /etc/login.defs, not in /etc/default/useradd)

13. Looking for sample /etc/named.conf and etc/resolv.conf and /etc/hosts