[rsbac] auth learn

Javier Martínez tazok.id0 at gmail.com
Fri Jun 13 16:48:21 CEST 2008


Please send your .config configuration related with rsbac and send the
output of one attr_get_file_dir AUTH FD "/route_to/sshd" auth_learn

2008/6/12 Jens Kasten <jens en kasten-edv.de>:
> Hi
> no i try this but nothing.
>
> Am Donnerstag, den 12.06.2008, 20:25 +0200 schrieb Javier Martínez:
>> Maybe you need to specify the AUTH module, try this:
>>
>> attr_set_file_dir AUTH FILE "/usr/sbin/sshd" auth_learn 1
>>
>> 2008/5/1 Jens Kasten <igraltist en rsbac.org>:
>> > Hi list,
>> > on the Version: 1.4.0-pre3
>> > the auth learn does not work
>> > i set this
>> >        attr_set_file_dir FILE "/usr/sbin/sshd" auth_learn 1
>> >
>> > and on the Version: 1.3.7
>> > the rsbac UM doesnt not work correct.
>> > i have on /etc/nsswitch.conf
>> > passwd:     rsbac
>> > shadow:     rsbac
>> > group:      rsbac
>> >
>> > and on the /etc/pam.d/system-auth
>> > #auth      required     pam_rsbac.so
>> > #account    required     pam_rsbac.so
>> > #password   required     pam_rsbac.so
>> > #session    required     pam_rsbac.so
>> >
>> > auth       sufficient     pam_rsbac.so
>> > account    sufficient     pam_rsbac.so
>> > password   sufficient     pam_rsbac.so
>> > session    sufficient     pam_rsbac.so
>> >
>> > if i use the required i get this
>> > May  1 12:00:47 jaschtschik sshd[31738]: (pam_rsbac) error not handled:
>> > No such file or directory
>> > May  1 12:00:50 jaschtschik sshd[31738]: Failed password for jens from
>> > 192.168.1.5 port 52671 ssh2
>> >
>> > with the suffucient i get
>> > May  1 12:09:27 jaschtschik sshd[31767]: Accepted password for jens from
>> > 192.168.1.5 port 58927 ssh2
>> > May  1 12:09:27 jaschtschik sshd[31770]: (pam_rsbac) session opened for
>> > user jens by *unknown*(uid=0)
>> >
>> > on the 1.4.0pre3 there the UM works well.
>> >
>> > grüsse
>> > jens
>> >
>> >
>> > _______________________________________________
>> > rsbac mailing list
>> > rsbac en rsbac.org
>> > http://www.rsbac.org/mailman/listinfo/rsbac
>> _______________________________________________
>> rsbac mailing list
>> rsbac en rsbac.org
>> http://www.rsbac.org/mailman/listinfo/rsbac
>
> _______________________________________________
> rsbac mailing list
> rsbac en rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac


More information about the rsbac mailing list