[Nss-mysql-users] Re: nss-mysql +sshd +pam

[Andreas J. Guelzow]

Hi,

I notice a few things:

You are using pam_mkhomedir.so. When you are trying to access the
computer via ssh does your home directory in fact exist?

#%PAM-1.0 /etc/pam.d/sshd
my file is called /etc/pam.d/ssh. You are sure that's the right name?

In the pam configuration for ssh you are using pam_shells.so, but yu are
not checking for an allowable shell in the regular login. DOes the
account you are using have a shell with an entry in /etc/shells ?

Do yu get any log information in /var/log/auth.log (or wherever you are
sending auth info to?)?

Andreas

On Tue, 2004-02-24 at 08:45, Phillip Cockrell wrote:
> Ok, I have configured my /etc/nss-mysql/nss-mysql.conf and
> /etc/nss-mysql/nss-mysql-root.conf. I have also configured my
> /etc/pam.d/ssh correctly as far as I can tell... However, it is still
> not working.
> 
> Here are my pam.d configurations:
> 
> #%PAM-1.0 /etc/pam.d/system-auth
>  
> auth       required     /lib/security/pam_env.so
> auth       sufficient   /lib/security/pam_unix.so likeauth nullok
> nodelay
> auth       required     /lib/security/pam_deny.so
>  
> account    required     /lib/security/pam_unix.so
>  
> password   required     /lib/security/pam_cracklib.so retry=3
> password   sufficient   /lib/security/pam_unix.so nullok md5 shadow
> use_authtok
> password   required     /lib/security/pam_deny.so
>  
> session    required     /lib/security/pam_limits.so
> session    required     /lib/security/pam_unix.so
> session    optional     /lib/security/pam_mkhomedir.so skel=/etc/skel
> umask=0022
> 
> #%PAM-1.0 /etc/pam.d/login
>  
> auth       required     /lib/security/pam_securetty.so
> auth       required     /lib/security/pam_stack.so service=system-auth
> auth       required     /lib/security/pam_nologin.so
>  
> account    required     /lib/security/pam_stack.so service=system-auth
>  
> password   required     /lib/security/pam_stack.so service=system-auth
>  
> session    required     /lib/security/pam_stack.so service=system-auth
> session    optional     /lib/security/pam_console.so
> 
> #%PAM-1.0 /etc/pam.d/sshd
>  
> auth       required     pam_stack.so service=system-auth
> auth       required     pam_shells.so
> auth       required     pam_nologin.so
>  
> 
> account    required     pam_stack.so service=system-auth
>  
> password   required     pam_stack.so service=system-auth
>  
> session    required     pam_stack.so service=system-auth
> 
> As always, any help would be GREATLY appreciated.
> 
> Thanks,
-- 
Andreas J. Guelzow <address@hidden>
Taliesin

signature.asc
Description: This is a digitally signed message part