[rsbac] nsswitch and pam configuration for UM

Amon Ott ao at rsbac.org
Thu Dec 13 13:36:34 CET 2018


Am 13.12.18 um 12:51 schrieb Palon Setin:
> These changes to the /etc/pam.d/common-* files:
>> < account       sufficient                              pam_rsbac.so
>> 17d16
>> < auth  sufficient                                      pam_rsbac.so
>> 25d24
>> < password      sufficient                      pam_rsbac.so
>> 16d15
>> < session       sufficient                      pam_rsbac.so
> 
> didn't get me the rsbac_login. They do allow me to log in the common
> Linux way. So, no harm, but no success either.
> 
> I only got the usual prompt on the six consoles, no rsbac login prompt.

Login looks the same - but the PAM libs will ask RSBAC instead of
passwd/shadow.

To see what happens, try
echo debug_aef_um 1 >/proc/rsbac-info/debug

Replace 1 with 0 to disable debugging.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list