Contents of /etc/pam.d/sshd and /etc/pam.d/system-auth is as follows

bash-3.2# cat /etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    /lib64/security/pam_sss.so use_first_pass
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account [default=bad success=ok user_unknown=ignore] /lib64/security/pam_sss.so
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3 type=
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok
password    sufficient    /lib64/security/pam_sss.so use_authtok
password    required      pam_deny.so

session     required      pam_mkhomedir.so umask=0022 skel=/etc/skel/
session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     sufficient    /lib64/security/pam_sss.so
session     required      pam_unix.so
bash-3.2#


bash-3.2# cat /etc/pam.d/sshd
#%PAM-1.0
auth       include      system-auth
account    required     pam_nologin.so
account    include      system-auth
password   include      system-auth
session    optional     pam_keyinit.so force revoke
session    include      system-auth
session    required     pam_loginuid.so
bash-3.2#

And there is no file on the system with name /etc/pam.d/password-auth I guess this is present in RHEL 6 and not in RHEL 5.5


Thanks

On Fri, Nov 11, 2011 at 3:09 PM, Jakub Hrozek <jhrozek@redhat.com> wrote:
On Fri, Nov 11, 2011 at 02:48:40PM +0530, Nitesh Mehare wrote:
>    Jakub,
>    I tried the modifying sssd.confA  to useA  simple_allow_groups = idsldap
>    Still it is not working.One thing I would like to ask .is my configuration
>    correct in system-auth and nsswitch.conf file?
>    Am i missing something.
>    Also one more thing I have noticed in /var/log/secure log file
>
>    Nov 11 13:34:58 bagira sshd[30879]: Address 9.118.25.17 maps to
>    nitesh.in.ibm.com, but this does not map back to the address - POSSIBLE
>    BREAK-IN ATTEMPT!
>    Nov 11 13:35:00 bagira sshd[30879]: pam_unix(sshd:auth): authentication
>    failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.118.25.17A
>    user=nitback1
>    Nov 11 13:35:02 bagira sshd[30879]: Failed password for nitback1 from
>    9.118.25.17 port 4300 ssh2
>

Does your /etc/pam.d/sshd include password-auth or system-auth? Can you
paste the file that it includes?
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel